{"report_id":"10f9bfc3-993e-4c9c-b202-4eb10ababdd2","version":6,"status":"done","tags":[],"date":"2026-03-18T11:03:28Z","url":{"schema":"http","addr":"zoom-jingcaiwang.com","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"title":"竞彩网首页-足彩网-足球彩票","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoom-jingcaiwang.com","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T11:03:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":20016,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-15T22:23:30.202114Z","alert_count":0,"request_count":1,"received_data":229967,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoom-jingcaiwang.com","ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":63,"received_data":3231299,"sent_data":31280,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"9d1.pro","ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-18T11:03:38.361724Z","last_seen":"2026-03-18T11:03:38.361724Z","alert_count":0,"request_count":67,"received_data":8346725,"sent_data":41531,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":4,"received_data":154364,"sent_data":2220,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/theme.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d000d901c3c419fc53ee3a83f2a8aaf5","sha1":"2699c5f94f5e8e65314825043b9b840ee74e8b42","sha256":"bbf3e360b10b0963272c3a377cd04db614ffe731e90cdf5edb52f816c41ad7aa","sha512":"bfc109dc4406add563531e176c701e483ff89e90b5ca642051b9d014d9469ec345f3a76f73dda7289a19cc33e92cbff7bbff2ef89e83741114ae6ff4363fc2a6","ssdeep":"96:zyAl3OO/J/g836/F/lpZa8wKuluS4oSJjJuShTS46nNKgSbSCsSI/2S46Sx9j4Sz:zygeh83AdXZGKEbQ5Jbh2NEBuwSsJ5jF","tlshash":"21e16b86bb1eb47f44ce1274a13ae7974aadf231823292f7f5e67c24809055b13c85bd","size":7316,"data":"","first_seen":"2025-10-12T02:47:43.567035Z","last_seen":"2026-03-18T11:50:35.054262Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/nav.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd6e25914069d275753d2a95d06ca9af","sha1":"cbdafadf508d251253e576416d11e8ee82d3eb40","sha256":"2ca68f93d537164259ebb629911c966edfb213a2bb924ef735a1f3b15668d5a6","sha512":"cf35fcab81166eaf37d68a593912b68be14f1bf4d01eb5f578e3bb31c42761eef73bbd825f5602f4d44deb46603c9d5e11f1ca7998a9d87a306f69db3ec7978b","ssdeep":"192:oIF2Ey0Tai/cIV//B3fzDKiH709i3qHPM4KgZNg3V07pNSM9:oIFy0TaijVnB3XK+709i3qHPMJgZNV7T","tlshash":"eb0240556208733241efb4aae40f138f2532a6b55703c0c5a0f8fee96d3a57697c3e98","size":8820,"data":"","first_seen":"2025-10-12T02:47:43.529227Z","last_seen":"2026-05-09T01:16:58.861162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/ajax-mail.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33404ff582af3566828fa01cea710a4","sha1":"4f99ed39a76474d362d8db5bc4b4d0d351885cfc","sha256":"45894aadae79a441fde789bb2e18b3a3f972957a950c99fe61470e4187f5d6f0","sha512":"fbc3fd12030006710e8c01c04aa211bae13d90af86f2d26e224026e4ad8412dbe4e9f0ba13b50f1d639ddb2a6984cd7662af999d1cf17772acbf2c5acc60b50b","ssdeep":"","tlshash":"7321af847e6f0b6e1a47221476fd72c9ff2cd2728607662aa7e9086516841cc17c27ee","size":1249,"data":"","first_seen":"2023-03-07T01:28:41Z","last_seen":"2026-06-11T08:11:50.913128Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.sticky.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"24823208c60bfc2a92deaa50cbdc6c29","sha1":"f2a855219e71fc4224376732b7c64e34670d855d","sha256":"bcf6b9b28cec8958f9d3f3ee39070e85ffd46d670f1f0baa7cd21aa24c188a00","sha512":"e626c4ac34f85b53894a55f0034825c513ac1e66be0263e3b98064ec3b8c68cc450bef5861322c2500f5c3332eb4c5b1c36b70bd605117a3a2995030ad53a235","ssdeep":"192:5AezbqD8ROUEO4crwoyvSZ5El3nt69a0lJ4DyalCgpsMkp1aAVNSGcsVL6mS3STU:GJDM0crw3ntiasJ4sZNS+tCP","tlshash":"5422449663b3617645abb0be479f924c32b38093a297ed147d8dca840fe697401f5bf0","size":10085,"data":"","first_seen":"2023-03-07T01:17:35Z","last_seen":"2026-06-13T15:38:31.465993Z","times_seen":2696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b34e5f57b4122379fd5ce55209b0872","sha1":"1a2095009f54fc9c9553509f9862501c41571ed4","sha256":"938461146994a57cf9c7ef941b7729298eb98841f69556d6adde9c5378ceee46","sha512":"9286cb5667a68691966b56d704bec3ef89e86deba74309820d8a82fd321d7ec397b3b7ffa91b145707e747293a5047420ab39d712415f7648074c767e91e30b4","ssdeep":"","tlshash":"81310f78566aa43036aba0282b3fe9413c90b01fb048d909fd8ee9048f18d5e4497afd","size":1532,"data":"","first_seen":"2026-03-18T11:03:47.405177Z","last_seen":"2026-03-18T11:50:35.166879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd7648e931a634837429d175571dc1d","sha1":"9bcc7214409c1246cc26d8339cdc97a920f47879","sha256":"ebc979aa2664717043d62c1ab7ea4d8b5ae6250d059a22dfd2879c60927af203","sha512":"761cc83ee64239e8657a8e624650e1e548f7771023531a25defe12c299ead749a3dd4ffda40f16a63ea3da2b5a96cc3a261018a3f819d6bd1f4382c7d9952301","ssdeep":"","tlshash":"bd117db66103421c8d778f2533ea57b0a1fd729b856822fe3ddf01538b9f6a001d9979","size":1000,"data":"","first_seen":"2026-03-18T11:03:47.508089Z","last_seen":"2026-03-18T11:49:34.401617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","size":3171,"data":"","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efc9ed46e06ab4594531830f769621e","sha1":"cddee92b894288ebb1b8630136566cb78bb047cd","sha256":"c6e3a1c9cf8f9d1c038abe117b50b8bf6912c5f093bdd3312f5ce20d6522810b","sha512":"f5e0e97d52cb31122b634aba4075bb7fcffd397cc22b68a72542fc5191b1989b6f47a8cc21556f9804f68ae32e3962818badd5b49d5215145a11487c71bc27b4","ssdeep":"12288:i7ko7IW+z5dpnOib888GuiKa97r42kNUbb2VclKR2X0HeAggd6j0o6E9ILBqM2VB:i7ko7IW+z5dpnOib888GuiKa97r42kNo","tlshash":"5cf4e7de3a0a042a9433ef7a3be5373812a96753c425195537ceac83cf1a7f021597ad","size":768570,"data":"","first_seen":"2026-03-18T11:03:47.335719Z","last_seen":"2026-03-18T11:50:35.114533Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/maigewan.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"69bdf52a1ecd210da01ee35731f29cad","sha1":"cfecdf752f8115fadcf2409fbbb362f15eb90276","sha256":"e649b133500fff6d6f8ce83767de94d2840ecf375529ca910ba7bd5ce375367f","sha512":"cd86c4bb3ac49ef66b059621839d0b22de308ddc648d46a0dbfe4184863d84e47931bc7e183ad3457a46f32792c3396e69f9c0a385e501f49b697eb29cb2e5f2","ssdeep":"","tlshash":"08e026bf093710348262e09e31aaa6483af8a01ab612403a94bc84968dd8d9518f678e","size":337,"data":"","first_seen":"2026-03-18T11:03:47.377092Z","last_seen":"2026-05-11T04:30:59.236776Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/slick.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a791ccc8e9d34fc76accfadfdd5e4f","sha1":"3f9098a372936df720e4ffef3493c328b48983ef","sha256":"4f183d6af3e88171a4bbae9a2e77f90f55b425b013d057b80eade59f96ae5d0d","sha512":"5e5a480df3b102519b2606f21283f4117a399aa95c613e54c4d4bedb3c2ffe0929179bbeb1383642f8c893b7ed6cad1a522ea09e3f43e9a9322753c02006dd33","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7v:6F97uPKFI/rhJ+vQgF","tlshash":"82338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","size":53180,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-13T11:56:26.342129Z","times_seen":3690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","size":1432,"data":"","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-06-13T12:09:18.660363Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd7ae6a7d7eca4078aa3f45fc5e4768","sha1":"a0b663cf3bd1c9211a4cce464f618d3f53ecccec","sha256":"7de489d20f0e5f315ac16a75610d795a4da40ce541a0afe0cfcfa90e5589ecd1","sha512":"27227e440750347ada7a2509e5537f1bc4214c0fca4465fcb9290e543130ebd7664ee26562f0d90633744fb5ecc3ff9eb8f27a163a1f184647a6d3feaf7ea3bd","ssdeep":"49152:NzmGOp53FPEffGV6pKrPr4e+wC/0al56ZwUW:O6s6wgT56ZE","tlshash":"81a5f989b291b02147e765a0002f110bf23a795d780a80acf679e8ea7dbd94d517ff3d","size":2246224,"data":"","first_seen":"2026-03-18T11:03:47.411636Z","last_seen":"2026-03-18T11:50:35.171915Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c22c7399405cff25df1911bcc5e0b28","sha1":"6abd7a383985b5ca0955bcf3a81b681bf5bb50ee","sha256":"51353f0d708f03e1bfe0f4bf0905aab2033a83261bab15f25fbde091dd219cac","sha512":"8c52c25da4766b4bb8fc6e9e3b6476ec3bd88cee6e51d97060cfda3d00d11297cd7ee2f7f1bddbe6367c3a37d4bafe3691a4474d71a4a76d2bf40f37ebc2195d","ssdeep":"","tlshash":"ac112567f14d253b4259d33b39acd70435ad1033d15570f58b960dc812c5abb5aa8de4","size":1000,"data":"","first_seen":"2026-03-18T11:03:47.511033Z","last_seen":"2026-03-18T11:49:34.407105Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0282c141c1617d801b45aee006d584e9","sha1":"936fc0553b348f75e40fbf81b465fc853fe3616d","sha256":"5242f6e892783d11b9b8120e81fa7f8eb8c7d76d0a859faf80bf42fd5c03c0ae","sha512":"5171782c86a5544432bc6d1384db7bfc3680d3a118521917be87f9e4e86eece8112fcc4298c300146d9befa56eb640d7ae054a6c24d545eb94bea39ec452a93b","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4r:DlTveVK4qtWhSmfVHXBuUs/KelUttP1","tlshash":"0a958d3eb389717c0a512211340f35356cb83ea7e54a80d1baacd5d627e4e58922ffbd","size":1936222,"data":"","first_seen":"2026-03-18T11:03:47.407447Z","last_seen":"2026-03-18T11:50:35.168103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3311a2ce97197bfed7e86d5f369ad60e","sha1":"8bb9b6e1de53c1c04f13a5ab0482d5a2345b61d0","sha256":"19a960994107fea1fda10330e5fe0ee078b004776ce87b38f4f5ff8740331608","sha512":"a7a291444d616a37c267a1e7614827bd989d91c94048765e87d0a297b39b9c478b923b998257037e76e357ea2acf182f2ad45d9e6fc5d904437fda02dbcbf512","ssdeep":"3072:ODKcxFDs95m0N9bjRP/E1oFwtgLG9Qjp2oFaxaXv5ZwGwEeVDsFiRzF:cjDe72FWgn8Xv5ZFwEeVDs+F","tlshash":"74243accb7da70664393a5b8503f004bb27a7992f84cc894f192d8c46e746aa5273f7d","size":229318,"data":"","first_seen":"2026-03-18T11:03:47.478295Z","last_seen":"2026-03-18T11:03:47.478295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.scrollUp.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","size":2035,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-13T18:18:13.232941Z","times_seen":3229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/waypoint.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc79ca2e1acfeeb00ad36a1bcbbb62c9","sha1":"376a2019d5cad0b7849693e658d9e0ae9ddc8380","sha256":"018ac5d12f09b06b0abae2b1981f56cea82b59f823ba2796f04441e287ea27da","sha512":"8850bf8a0c9129762f867f6f200fc946a3105f5c211a3720e936eb1d1ae92777da58cb81941a0a106813cfa17f5422fa3e925c580eb1b12acda90fbb18f4f0e6","ssdeep":"192:XbBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:rFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"47126189350134221bdf50fad91f434ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9029,"data":"","first_seen":"2023-03-08T13:47:56Z","last_seen":"2026-06-13T14:33:20.371296Z","times_seen":707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.counterup.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T18:18:13.25756Z","times_seen":11468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery-3.6.0.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-13T18:32:32.673074Z","times_seen":480975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","size":43844,"data":"","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"869ec1c33aec9c19f7f60e926604c239","sha1":"3956747325c57435463b652f8266934e41ce32f2","sha256":"9071a7a3eb0e283410d23823fa2bf56a72dd13165b17962431f6cbe978754fc9","sha512":"d71658f0f25fa7c25cece40189f0bc85022b5b688d2257404aa005617501dc7d94796b811c580856d8fa4a2c2becc1e76c609f296d4fb60a4c1b685165f74212","ssdeep":"","tlshash":"ec11058df06e70cd93a76074153f301da12a2ad05c1e0dc0b6b6d9f5be1074aa03ef54","size":1010,"data":"","first_seen":"2026-03-18T11:03:47.514328Z","last_seen":"2026-03-18T11:49:34.408589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef08aa91899f0c2e18a6e391d6be428","sha1":"63c4d60c860b78332c9729000d502d05dcb32999","sha256":"4cfce93e499a6434609e5c289794ef60fb04894d8b34e7b91c410d6637ec3aa0","sha512":"5f71b70f2a28c9fa0da326ec1e59dab620fd2efcac7974521af669b4b807860ba5e22bb9fb28563a29db26eb4c03a7d1d048779c5b8ee5d4f316ef45f92893ec","ssdeep":"12288:cTkrSg07HeJItqwOACRLwiWppjpruknaQIV:cY907HemRO/RLtW7pKUaQ6","tlshash":"a7255db43291606a07eaa0d7402f1b01ae7d5e2b640dc0acf62dedd72eb4b05e57b774","size":1009820,"data":"","first_seen":"2026-03-18T11:03:47.327455Z","last_seen":"2026-03-18T11:50:35.093325Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/venobox/venobox.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2409c31cfb63e28b8d0213c1ad2bd20","sha1":"a2b9949ff930a1a01a93595d949ce13cca428951","sha256":"49bcf8033d9c986403ad766fd393ea50e9298cafe34c5050302276e46b0db58d","sha512":"cc14e75fdee4dbaf627b053044e896c0ef3603ab973b895c8ead19e319ef3bea806e50bf44c41152ef1f4152ad48584f34a0f95f387d3cca191bbf8b9e61f51e","ssdeep":"192:l96Ri+jXrhIqJ1bYAB20R9P/IkgeV2OSymwuPPm3UCteUSu9syLazNxRwhrrmDw5:l+3hwAB20j/Ikgg11mwQim1qr9UZcN","tlshash":"5262b7b57615b49e22579ce8253f674f3223a67fdd03076361f4d3e00fdac8aa892909","size":15157,"data":"","first_seen":"2023-03-07T12:10:10Z","last_seen":"2026-06-09T11:43:55.036365Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","size":5810,"data":"","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/countdown.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"85b1a21e4729b6b7c54897fe46ea21dd","sha1":"f49ba91732898eaf03b0f0deb8e5d8199840038b","sha256":"d0c85a0dc398ec22c48be7a4533441d142b6e2168370ec5f3b0d0e13f0cddedb","sha512":"b5d75bef733f2a9662bcd3e57660fa5cbc9d0b51d48ce388590917b2db91c56eaf7cf80af59d2f6159b1969e0ca8bc6b316b26b81984adee92863945dae4f1d3","ssdeep":"384:HFUpxGhqtJxMxHxqxAxixw3xexIxrxAxWKQJK4MN12CfigRnkKltru:lUpQhqtQResGM6ENsWKQXMNPfiAlM","tlshash":"cc42b5ce733212652e7552aa54ae11073175c635b445481cb6fcfac8b9f8cab60bfb38","size":12709,"data":"","first_seen":"2025-10-12T02:47:43.50802Z","last_seen":"2026-05-09T01:16:58.897354Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/bootstrap.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","size":60010,"data":"","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-06-13T17:39:56.059854Z","times_seen":12989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","size":5810,"data":"","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","size":1432,"data":"","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-06-13T12:09:18.660363Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-06-13T18:12:51.393411Z","times_seen":22967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.meanmenu.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4f94c3275eacb6a8338747442b42832","sha1":"de8080ae015d007cdbc9a54a328d8b9e6b658ef8","sha256":"8ae6b70f7800fd5253c9c7af41cd1db0ef8b80e2e1ac9d4f642ee237e1086c4f","sha512":"f9eaad89b2077fc62f933423b1d1216c6ee07791170b1b3c79dc91d5365d25a9399dbceb738d0bdb957a0732ae746981fce34f52dbdd4bd0ad8303d34a752929","ssdeep":"","tlshash":"27812062757084fc24bf94e6f43ee33632f7a40ef44ed400b17aa9b63466a851063ad9","size":4034,"data":"","first_seen":"2023-03-09T01:54:05Z","last_seen":"2026-06-09T21:04:28.374453Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/wow.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T18:18:43.4966Z","times_seen":12891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/circle-progress.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c96bb8beaa6eb6a1a13771fadf8169e9","sha1":"3efe06109f362caf1e6bce5cd8b7b935c18a0ad4","sha256":"d97a637cb2f9b5160b6b7000334833e9a018d33c6f1e8803cd359e9b19133c38","sha512":"ea4be167fdfd81154b9a833fe89c5b6c95536332ff8276c356c1c008bc7fdf5211114e25dec23bc9e3b4778830f315393299a6ff5ecb31a0c73827fe4efb82d9","ssdeep":"48:U5EwgSswmWlBttGHw0p1mtw1MNIqAlfgnkdBpBk5VGbTmZfFzmfBQPoMG4DeEdPP:9ml3cmkq2okbnieKmHQiR+","tlshash":"b891c99b72525c12666769b1403f1206633328ac6d1bc1bc793475ee5db4f0b21bba7c","size":4445,"data":"","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-13T09:27:21.696428Z","times_seen":2051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4c9359bd4b3b2032207c29caf2c66b","sha1":"3440357d31da2df2137cd51dc09b14b698972590","sha256":"369f83be7b154a444680ddc7ea72b0fa3b474121dc0c0c52c18379cf9e541457","sha512":"b43dcce0937093abbd795c8f5c14a2fd51577ba6fd44c17891eafd46e3d4b0da52c56b8a1904770496a46f7cadfd4e8a48edad26b7e9f61ca66c058b14343406","ssdeep":"","tlshash":"f931ca7d27a211b2954398ae3fa603d03d3975278288d9417c3de1d9efe0e428961ff4","size":1465,"data":"","first_seen":"2026-03-18T11:03:47.409562Z","last_seen":"2026-03-18T11:50:35.17288Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b34e5f57b4122379fd5ce55209b0872","sha1":"1a2095009f54fc9c9553509f9862501c41571ed4","sha256":"938461146994a57cf9c7ef941b7729298eb98841f69556d6adde9c5378ceee46","sha512":"9286cb5667a68691966b56d704bec3ef89e86deba74309820d8a82fd321d7ec397b3b7ffa91b145707e747293a5047420ab39d712415f7648074c767e91e30b4","ssdeep":"","tlshash":"81310f78566aa43036aba0282b3fe9413c90b01fb048d909fd8ee9048f18d5e4497afd","size":1532,"data":"","first_seen":"2026-03-18T11:03:47.405177Z","last_seen":"2026-03-18T11:50:35.166879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","size":43844,"data":"","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","size":83197,"data":"","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-06-13T12:09:18.626246Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","size":3171,"data":"","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-06-13T18:12:51.393411Z","times_seen":22967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","size":15952,"data":"","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-06-13T12:09:18.614775Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0282c141c1617d801b45aee006d584e9","sha1":"936fc0553b348f75e40fbf81b465fc853fe3616d","sha256":"5242f6e892783d11b9b8120e81fa7f8eb8c7d76d0a859faf80bf42fd5c03c0ae","sha512":"5171782c86a5544432bc6d1384db7bfc3680d3a118521917be87f9e4e86eece8112fcc4298c300146d9befa56eb640d7ae054a6c24d545eb94bea39ec452a93b","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4r:DlTveVK4qtWhSmfVHXBuUs/KelUttP1","tlshash":"0a958d3eb389717c0a512211340f35356cb83ea7e54a80d1baacd5d627e4e58922ffbd","size":1936222,"data":"","first_seen":"2026-03-18T11:03:47.407447Z","last_seen":"2026-03-18T11:50:35.168103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f4c9359bd4b3b2032207c29caf2c66b","sha1":"3440357d31da2df2137cd51dc09b14b698972590","sha256":"369f83be7b154a444680ddc7ea72b0fa3b474121dc0c0c52c18379cf9e541457","sha512":"b43dcce0937093abbd795c8f5c14a2fd51577ba6fd44c17891eafd46e3d4b0da52c56b8a1904770496a46f7cadfd4e8a48edad26b7e9f61ca66c058b14343406","ssdeep":"","tlshash":"f931ca7d27a211b2954398ae3fa603d03d3975278288d9417c3de1d9efe0e428961ff4","size":1465,"data":"","first_seen":"2026-03-18T11:03:47.409562Z","last_seen":"2026-03-18T11:50:35.17288Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","size":83197,"data":"","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-06-13T12:09:18.626246Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","size":15952,"data":"","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-06-13T12:09:18.614775Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/isotope.pkgd.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-13T16:35:12.62637Z","times_seen":23202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd7ae6a7d7eca4078aa3f45fc5e4768","sha1":"a0b663cf3bd1c9211a4cce464f618d3f53ecccec","sha256":"7de489d20f0e5f315ac16a75610d795a4da40ce541a0afe0cfcfa90e5589ecd1","sha512":"27227e440750347ada7a2509e5537f1bc4214c0fca4465fcb9290e543130ebd7664ee26562f0d90633744fb5ecc3ff9eb8f27a163a1f184647a6d3feaf7ea3bd","ssdeep":"49152:NzmGOp53FPEffGV6pKrPr4e+wC/0al56ZwUW:O6s6wgT56ZE","tlshash":"81a5f989b291b02147e765a0002f110bf23a795d780a80acf679e8ea7dbd94d517ff3d","size":2246224,"data":"","first_seen":"2026-03-18T11:03:47.411636Z","last_seen":"2026-03-18T11:50:35.171915Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fcf348ccae06144c80b056594fcad25a","sha1":"91af32217ba3270a7f822067e2cd20f633e9f376","sha256":"7c45d61b81d68e0b3a6ed37712b162ab22300439850373bb00b0b14611219807","sha512":"5c72236e96b051c4965411e08b9509b662ac563427655162eb8116328cafdf184891916a27b2c178a944049fecccf09c9d3c9d33712e95e0daa4e8092686a767","ssdeep":"","tlshash":"2a900212a204391565a495142505a854455cd51151041596a544d1994c92ad041a3635","size":52,"data":"","first_seen":"2025-09-26T16:19:50.888217Z","last_seen":"2026-06-04T17:44:33.139598Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/favicon.ico","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:07 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 6995\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-1b53\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6995,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"41516f0533824fbdda91efe16a03d20d","sha1":"270a495d2fbd23a2bc2ba78e117024af800b4739","sha256":"14c40537817aa21ba287469cfadc236aa859546256b1200124fdaad22fc1bedc","sha512":"225c96d388faa52f1ad9f6ef0fede2cca2b81e563d7b5502a89688ed95fd9570da1ad7a98200ab2cf85d435829777f052da2a8322915d79bc7552e79d6672e25","ssdeep":"192:8rrxnlhP8GSgTrK0/oAZzrKdvtLzHXQhyNm:Anr8GDzooz+dpbm","tlshash":"63e1aeaa36469146e626af39dcc4304dce69821a5dc30f986346b0787d1d3662b2b1aa","first_seen":"2025-09-21T07:48:24.166978Z","last_seen":"2026-03-18T11:50:35.102056Z","times_seen":3,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/test1.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/test1.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3bd4\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"8935c10d0f3049fa86a4d4791f0a6959","sha1":"b8738c8e6939794b1c53550bc944ddc080f06da9","sha256":"c29d7e46f727addea24c13195f2d1d16068df5d131ade7c0f9c68512a6c18ac9","sha512":"f90bb28e966b7fd58152f804785ee450f6178280c1e944456a4f77586cdb05ea7ed452ec3c36cb7a3dd90e84c733a681655567b6347dd8be965d0b42a57833ac","ssdeep":"384:OLSIjbdFbSpuaBdAYtEvxD/nPm52umDE+m9thL:zCIHBeJrn+5ADEdV","tlshash":"ed62cf9eed9df39bf4c48f1a6c604aa6cdad8da085214c3774a9d6d235803c0536d8eb","first_seen":"2025-10-12T02:47:43.513183Z","last_seen":"2026-05-09T01:16:58.847721Z","times_seen":4,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901260.015225270362163479\r\nx-sign: 1bt4D7NRZc8CGMQ/Z1OQDZyOhYPUFXD0VA4/YTV0heU=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 42\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=yaunjq5afqjovja1lhno54hm; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54888\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4057f1aced36477c0003dab992d85c76","sha1":"9b7568939b59bbfbd5b680906349d647ff2cf918","sha256":"298700b893cc7df7eba3dc41c6664701168edd6b742f605f4d90ec1d523dbe37","sha512":"e152f7f0a096d52d87850b9903b245c917bc9edf4a89d0a8d5c64948f1264cb45ec605ce7fe9349679725f02a3fe950b722ba1022f67bd02102ea14bbcf345f0","ssdeep":"","tlshash":"de900445c0471fd30154100c0535050f11cc504144004714531d0d045f54dd01473044","first_seen":"2025-09-26T16:19:50.814776Z","last_seen":"2026-06-13T12:09:18.63261Z","times_seen":28,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897430.3365434394802411\r\nx-sign: dvX+ONKBUaeWfIV/3c1sPozteAI9/MulNZnKWCO1PRs=\r\nContent-Length: 21\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"Name=M3-GAME-CATEGORY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1797\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=b3ovgsp2c52udoz5e4qqzqed; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6cb63ec225a231053626d636c01fd6cc","sha1":"9b2f4e3f2b30032d570e41b31385eb0fcc9cdce0","sha256":"90ca57cda516f7ab16380f1c6d4c669dff5de435c838ef3d060fda16808f49ed","sha512":"33a2ef431737b80c04d5bd9972a7558fa996189f4543d1d149cc2f89e588e436b58adc713dd90801018783445a09199058d6f59ba982c87933d0e237a84b0eb1","ssdeep":"","tlshash":"27319c72d4630c350b1f2a5000cd6c8de1ce63ae85c9de66fc1cce8b91afa49616609b","first_seen":"2026-03-18T11:03:47.390533Z","last_seen":"2026-03-18T11:50:35.130938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/domain/seo","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/domain/seo HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901270.23242862445092782\r\nx-sign: nTk/YASDzSABTs8BaFtcV6Lo1COMo9ak15UxEiijpU4=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 87\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=e2ucni3jw3qtb2zc2vdao4lh; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:16 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d3906d87bf4e57a9d3dfd05c7057d0b5","sha1":"9da97a56795154cdf739fd4fc0c9656a462b7047","sha256":"2ed70769a73d358faad18327796ff0b22133b15c46d554377f52a0f34a39f5bf","sha512":"60c3361a0075f3656efc09f18dce032fc75777a0ca797fcf42e7275784a847ecfc23a1f203ea0c0990089a3ddac0a9f41659ca12a0098b377ae6729e058d396d","ssdeep":"","tlshash":"d7b024051cf33c73050d43050c10740d30d05341554c4354dd3d1c0d0d4cdc4c7c7040","first_seen":"2025-12-23T05:44:48.97118Z","last_seen":"2026-03-18T11:03:47.421301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/fontawesome.min.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-223d2\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56656)","md5":"2f18f20eee76ab0f2402015c912f34af","sha1":"11284569558728556127fc1e0cdf0fb02122381d","sha256":"7496288b2662e3f9b6e942da2490f4bfd959ad436e5dcc1c09086fc1fab5ebac","sha512":"62ba6afbd0b73daa3362c93fc5bc38305a4ed18438ed6f44dd32e5ed2737a228f86ce82bccba417cb6caeff9500e9c7c5af80b007ad012217d26aaa373e702a8","ssdeep":"3072:EP14/p5Bd6dAYxFp+28lSPd4/IOBBAdB+C:EPCRd61+28kPKDBAJ","tlshash":"42d30bb8e54c01daa731c44bff81b2bc61baf73dd5814d95f00e691c2ad26a811c5fba","first_seen":"2025-10-12T02:47:43.53619Z","last_seen":"2026-05-09T01:16:58.842455Z","times_seen":4,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/waypoint.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/waypoint.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-2343\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-06-13T15:41:07.529712Z","times_seen":16672,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadcss/index-load-progress.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadcss/index-load-progress.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-10ce\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:5 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9fc3a76ccfd59d79cee468a438777630","sha1":"457ce462c7ba0a5758450b0c263f5041247404ce","sha256":"48f646091a1656bb5a392e039bd26dd811e2ed7947225ba003adcd9ceb9c5387","sha512":"b2bb7e624f210b19a0c032a41d963d848e53eeba41ae71d015adcaed0b739cd3c07ae0cb6e8e97009160f82e3f71d62ca55e1857a21c2aaeaf0c3c3b3923547b","ssdeep":"48:oTg4CMbtmr1AMpCCWTwBRNdwdudx7dR/CdRjlxo2dRTJjDGdRddhAd+kXk4kakwA:oCsyMCWEziEAURGV7B3sYN7ZI2UNXUu","tlshash":"eb9189e19e650b2f78e6d85428960d93135b4052894fe8a8efd6b02ceedb3942c5f3c5","first_seen":"2026-03-18T11:03:47.397851Z","last_seen":"2026-06-13T12:09:18.681028Z","times_seen":21,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/vendor.812e883b1b860447096d.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/vendor.812e883b1b860447096d.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-224650\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:18 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168504\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2246224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2ad91d674ef50725342ddb35f489f16","sha1":"5f75349898ea7bfa604344a67bc0f1e6cf7fff26","sha256":"378af61f200afd6badaa41128942c15c3a26ebf18fed180a9131fec917b2ee8d","sha512":"b904161977189326fa86710c1904030bafd52623622e4ec88ee3b49b58ad55a1995b89caf1e6b9bcc7b95889e1c7d465495b0e8c7a2ddc396a4db0d35fb05ce6","ssdeep":"12288:HtzmGHlMt2GAVdams3HF5+bo3FdtnEFlFxnG:NzmGHuAVduFQE3FdtnEffG","tlshash":"fc250a89b291b02147eb65a0003f110ff23a795d680a44ecf665e8e67dbd98d913bf3d","first_seen":"2026-03-18T11:03:47.334034Z","last_seen":"2026-03-18T11:50:35.146709Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/GetNoEmbedded","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/GetNoEmbedded HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317893990.6399395284828603\r\nx-sign: YG9IyHjglAJfJ5ND8490cODPaZGVO2Bre2Rbi+jijK8=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=cpezsdpaglnh3wf5p43kcscl; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:0 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-06-13T12:09:18.634635Z","times_seen":28,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/gc.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/gc.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 8029\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1f5d\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:10 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54857\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 364 x 120, 8-bit colormap, non-interlaced","md5":"280efaa053f0c15b617a0e71b2f2094e","sha1":"b31c93e263230efccc4bb2eebc188ff3500e3256","sha256":"f2c0fbb8375a71600ca4f2475c8386e3f2eec88c52828c18f7803a2a36da6d1d","sha512":"bd5ae9074f205105df3a0b79cdbdfd18f3de4ead2d0a8b14fff923c9b83c3fddc007478dddca1e6b5606a58a9eb83890ba0cbdf1274abcf2c887f8391fc4ecb6","ssdeep":"192:X/lF3x5KeDnOsEUiV4/zGAC7IycMYFHqUx7/xmcn:X/zh55DOsQ4w7IZMYFtDxmcn","tlshash":"f6f19dcb9eb1606430ae6687ed04dfc46e095c590921e793b203529b4fd4cfaa7f884c","first_seen":"2025-09-26T16:19:50.830916Z","last_seen":"2026-06-13T12:09:18.635637Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/deafult.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/deafult.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-18bd\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6333,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d2c57037185e9f5fc33acfd06ad90a62","sha1":"d67f988c3f6ce90b0041c7e2b762a42fdcfe459e","sha256":"76da92c267507d06c644f07ec3ef93e788038dfed1493eb9c08c33a19ec405c7","sha512":"fbc8a11fdc28c8d8af57127e99ae021d51bf2d21f19a1e984a7b8d1e1054a67666b021df5f93e250823f2efab21ff30da51066421b4f724d2713507283cd7896","ssdeep":"96:cCE5Em0EzM0x8n3PwMEoSXQ5b5XBm8xtn6M5Ly63zD20:c8nIMEoBbZBmgTlys","tlshash":"68d11e921b423b2292b24d30772ba689f36011768f4434ecbce115b5af45be9d664fcf","first_seen":"2025-10-12T02:47:43.546824Z","last_seen":"2026-05-09T01:16:58.886901Z","times_seen":4,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/test2.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/test2.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-45a2\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"78bc980eb0ff67def91557c3b5c30725","sha1":"8c3c97a9b67ec1f527ccc18702041ff2bcc3be51","sha256":"5c645ac82b74158dd05dbf39e8ecc69f3ed81ca08c7bb98b7e2d308bd240882d","sha512":"c70f25bb47a93d3bb1cbb02ff8ff32d3f660cac36a5fdf208d4161d31063324f1703ca3755f87974258aa69893306e8eb32f9998f0cad0d45ee2eba7d6fc66c3","ssdeep":"384:GjT5A7P+5SgCwF92igGe0hXRJkT38iN0EJK+P95h8PXVb:G/50+5d2dwX/U8BEJK69j0b","tlshash":"2182df00eb4531ba395c6aec529588048e479122c181c1e1b5f7941efb58dddbdb7e93","first_seen":"2025-10-12T02:47:43.524915Z","last_seen":"2026-05-09T01:16:58.863592Z","times_seen":4,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/slider1.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/slider1.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-4ecd\"\r\nexpires: Fri, 17 Apr 2026 11:03:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"780b13762bfd3eb7ce7b4f49a3b45c3b","sha1":"d3bbc6e36e754a5bafa7cf3b556726bcf4b76823","sha256":"7931918ec2f1cf78f0df21b0415b45e08fc5b44047a14907bf9673a2b59b57c3","sha512":"2241de7e0f94cc75fc8bb6d19ba8f6be4e48334d943b3197e22db5925a4506d4ab4841173b2a557186fb48cf53c95e073ee133737e633658aa5019d3697355ac","ssdeep":"384:uUiQHoMmxm4pgZVUxdGIdBE06tnJopRkDFpipwKz7p5FR:9TmmRVbnJWkjewq7pt","tlshash":"1a92d173468588ecf5684b273f53be8a16db837a104e2699d0ef27f0d15619a23dc17c","first_seen":"2026-03-18T11:03:47.429338Z","last_seen":"2026-03-18T11:50:35.100848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/contact-bg.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/contact-bg.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3a23\"\r\nexpires: Fri, 17 Apr 2026 11:03:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"f8eab67904cf04fafd7c3ac5f6bedb5e","sha1":"189eb5169021a242076172bfb58a9c718ad6e3e9","sha256":"e1866c57deaf4f432210d6ed76fba49f488c9f0936a8002edf4fa12991cbfdcd","sha512":"9307c9a846b488139502a9c37a093e739907ee02498a53c83f4192f6716a085d5c73459d637edc42f0d48dc8320a888a7bf7d4acad9a109bac2439858e2d5b78","ssdeep":"384:WcGXE0Kf7uza6vZTTpL4kepBmk0zD91RccGlPgmYsnlkczwKohZLUrMim:Vlxf7uzamPqkqhIJ1RQPgm/EKo75","tlshash":"4462bf0a0dae061beb435f3253a13fa15de9734f513d2a7e484639300a7acb65e04f97","first_seen":"2026-03-18T11:03:47.430179Z","last_seen":"2026-03-18T11:50:35.109286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: text/html\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-125e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:1 (W), 0.0 VM-ARN-01Kmy5:10 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 4215\r\nx-ws-request-id: 69ba866a_VM-ARN-01Kmy5_11215-33670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (717)","md5":"c288e68366d08413d91f10e27f1e696f","sha1":"cc8c790bb98cd267db3a1839248f57d5648399ff","sha256":"03c9dc2af1eb8675be73b08009ae7c2fe000453cbf17f202e5b799c6018852d0","sha512":"1bb1b78d5a76b6de983141dc2afdcf390d134983886f4a7c7f14dbcec3a2a2d67b0fb2a757b8d8426017c98a65380aaaea18bd9df1eb4b94903a3d59489d0b3c","ssdeep":"48:b3Xh9PBTXl21zMiDv/qt9SHi0A5QDwUnqFOl39VE/Md2IP7xAPwqhKYNlrOGl1Fz:zz1Xl2taf/QEufQf1IYvr1tWPV/Gzow","tlshash":"49a162791e42c035215398a82b7bd2417899f127a204c800fdece5dcdfd4f8a4dbbae9","first_seen":"2026-03-18T11:03:47.282236Z","last_seen":"2026-03-18T11:50:35.119663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":50,"dns":1,"connect":21,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/events/column","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/events/column HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897390.2308044857301842\r\nx-sign: ESsxIR6KPd659PkCbhpojGZ9CBwYrb2pQGYG4YtAfuE=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 465\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=pjiazd2bz2mi2ju2pcs5iur4; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:11 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54865\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3bd6dd944619b02064db8fe06aaaafe9","sha1":"2b15bcf138b311771491b1fd6e85570aa81cebf3","sha256":"b3b578675e066ab1d1202e0aa036516c68e1a32e2645a5b5112f8118be3ebfb3","sha512":"79bc4e616b16459267773d72975c4263c863c0c3ef47fd994b2d26cf5c4c29a39b9afa748a29406f7a2f7bd49c661e8b8a042ea3d1c952331a258210a7f7cf7c","ssdeep":"","tlshash":"e7f06527f50b0afe3117599ee74627b430cf21db6e490700dcdc1d49a085f4e0d31411","first_seen":"2026-03-18T11:03:47.431883Z","last_seen":"2026-06-04T17:44:33.08323Z","times_seen":13,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/islogin","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/islogin HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909620.6464365323739223\r\nx-sign: /YaCHDb9lykPqrc9YnPUqFFBK9ft5P9jCTuPSxfWaSw=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 86\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=r52lupp0vycrhuy12tg0s2qr; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"85c19b73ab5bd84535e75af9a783e15c","sha1":"33395360689190575c78081f3e5e9067538519f3","sha256":"ef712068b1a6f0ab4c2f48d94d82071be695390e8b9b42c4ab1a52913ff1d176","sha512":"c9e8a7cddf87debb7849cf17235320d3890d12b6b43346578b9309968bea9b6b75d2a2a1b46ceb02af6c38515a125dcc922a5ebe3ad71c771d032cc4fa4033c5","ssdeep":"","tlshash":"0aa02400305f33530d4001050c314f4f314c00530c00473cd13c00011d4fdc53743574","first_seen":"2026-03-18T11:03:47.432723Z","last_seen":"2026-03-18T11:03:47.432723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/theme.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/theme.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-1c94\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d000d901c3c419fc53ee3a83f2a8aaf5","sha1":"2699c5f94f5e8e65314825043b9b840ee74e8b42","sha256":"bbf3e360b10b0963272c3a377cd04db614ffe731e90cdf5edb52f816c41ad7aa","sha512":"bfc109dc4406add563531e176c701e483ff89e90b5ca642051b9d014d9469ec345f3a76f73dda7289a19cc33e92cbff7bbff2ef89e83741114ae6ff4363fc2a6","ssdeep":"96:zyAl3OO/J/g836/F/lpZa8wKuluS4oSJjJuShTS46nNKgSbSCsSI/2S46Sx9j4Sz:zygeh83AdXZGKEbQ5Jbh2NEBuwSsJ5jF","tlshash":"21e16b86bb1eb47f44ce1274a13ae7974aadf231823292f7f5e67c24809055b13c85bd","first_seen":"2025-10-12T02:47:43.567035Z","last_seen":"2026-03-18T11:50:35.054262Z","times_seen":3,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/log/logroll","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/log/logroll HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897430.4932265972910512\r\nx-sign: rMmBqzqnHmSmC2OwH7/zXu7fa8FouFIjTF9XhZXilHU=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 4139\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=bldqcetzx1d1rgf4vwe1mjkj; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4139,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7f6acf95dabb39e5bafea869bee55188","sha1":"be01d2e8d1fad69255851c7c1d72c731697a0419","sha256":"a588cf9e45d2b46d525b97fed59157aeb477ad6e1d088d8f91e2e769824780bb","sha512":"91d0c304ab58dd26b91c92331e074fb2facc3b1ee74f099846b2ebaea3c8440791432d1570a90fe34e32da3b446683e81b7f308e379e136bcbf6eedb8fa9baae","ssdeep":"48:YrESsIlbEy4FDp/eESb+EyYiWB+Ezq1/EMiE8LEShE4sEFs1JEXtkiEAiEeIEqIJ:8bBep/ekHfubHccs/Otbii6kMexpC","tlshash":"bd81f61f36ff2df80fd49ad6e3ca1b27b41d712109068689fb30d8088aed6a5d978345","first_seen":"2026-03-18T11:03:47.43439Z","last_seen":"2026-03-18T11:03:47.43439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/money/getbalance","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/money/getbalance HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901260.7541113459799603\r\nx-sign: 1TI1Ilvaxu9b5fVynsS+ZvYpuFM7PpBz1FwyBe3cLDg=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=0udf4hvs5cbq2smt3pruiipw; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:16 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-06-13T12:09:18.634635Z","times_seen":28,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/fonts/fontawesome-webfont3295.woff2?v=4.5.0","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/fonts/fontawesome-webfont3295.woff2?v=4.5.0 HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 66624\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-10440\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-06-13T15:32:58.971598Z","times_seen":31460,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/fsc.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/fsc.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 71487\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1173f\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:4 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 178, 8-bit/color RGBA, non-interlaced","md5":"b25324b69e8aa6ff0b664525c8e1e0b0","sha1":"b9227e1b4ff32c78518975a231ef11bbf9fb5044","sha256":"76ef399775a8964417f4dde833e286026f432dabf765558f7c15ef72628fe46b","sha512":"8fd4e8422333d2d776826504c8d0df88d490c0e48aa1feba7c2c240acaae0fee597ff43cef10d4f6b942dd8a0dd53ad4efeba8f5ed8968911384e68645af93c6","ssdeep":"1536:KfQCYU66lL9Thwd0CxovRzHE9LiiXJ9YQO9kvdm2r0aF8:Kf1YEFVhU0Cxo5HE9zXJGh9kVBIa+","tlshash":"036301cb8e35171065fd00e99d15cafbb68cb0882a353f4aae4909f313a96144bff618","first_seen":"2025-09-26T16:19:50.844565Z","last_seen":"2026-06-13T12:09:18.740479Z","times_seen":28,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897390.1037260167347811\r\nx-sign: KaGEJD1k6AKj7HmrIWo8O1ylKR3hBc4bNX8MgLV+lFM=\r\nContent-Length: 21\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21,"data":"Name=M3-GAME-CATEGORY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1797\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=qpwc0abg11svcj3kqijvfqio; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:0 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54864\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1797,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6cb63ec225a231053626d636c01fd6cc","sha1":"9b2f4e3f2b30032d570e41b31385eb0fcc9cdce0","sha256":"90ca57cda516f7ab16380f1c6d4c669dff5de435c838ef3d060fda16808f49ed","sha512":"33a2ef431737b80c04d5bd9972a7558fa996189f4543d1d149cc2f89e588e436b58adc713dd90801018783445a09199058d6f59ba982c87933d0e237a84b0eb1","ssdeep":"","tlshash":"27319c72d4630c350b1f2a5000cd6c8de1ce63ae85c9de66fc1cce8b91afa49616609b","first_seen":"2026-03-18T11:03:47.390533Z","last_seen":"2026-03-18T11:50:35.130938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/icofont.min.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/icofont.min.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-16836\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65364)","md5":"ff8bd83d3c2deab4428952808513f4d9","sha1":"3e614645dbfea9dbf6a05c668e28d3181485ac8e","sha256":"882f43879ac20dff7edf501cc5a48b2ae4ff78d88136399e18bad1ecf9b7dc39","sha512":"5e36deaeafc43829c04f4407fd7d203cb829d258574bd50c44511d95ad0c3881c0f91a24359f7738e862835db1812b5131ee8d70acd8cde0a730297c1a08753f","ssdeep":"1536:PVN69xXFF7NJ0H3ZuRW5x3IE3+7IIQinB:Py9xXFKuR03IsSIIQyB","tlshash":"3493c6a4d78a55cd7b32cc0aa385a628ec96fd33c5e10e21f01f951d18f7626a3c5b78","first_seen":"2023-04-07T14:44:51Z","last_seen":"2026-06-13T09:24:56.205361Z","times_seen":782,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/br2.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/br2.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-df9\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 82, 8-bit/color RGBA, non-interlaced","md5":"240c2ef0786408517b01e14cd527bf39","sha1":"a9c2f8dd79fc26efd902010d9a20a1aeae09ffd9","sha256":"75a4ac9eecdd8247a3aa00441a1a8b3277ab6a584a48d365036c27dff537d1fd","sha512":"3a804c2848250ea8fa153990822b6e5f525246f2e59ab77c064973afd4b69e59f497b50d17dc2c7a87ae950d47af8890438f7f825affbfa6c8f9ca40fb27163f","ssdeep":"","tlshash":"be714bc86e81fd81a844ec500ac35173c65706a0abb4f254fc8ae51a59b45f5296e2eb","first_seen":"2025-10-12T02:47:43.532072Z","last_seen":"2026-06-08T18:47:35.208579Z","times_seen":8,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/test3.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/test3.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-4d23\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"e539b14c1b91fbcf2773465a48beaf9e","sha1":"7233bd247dd7501700d6aa5f7d0f2bd6efda467f","sha256":"ce268ab3b730ed21bf1c30f7046f691eaac0db60e2eef16bfb596bd9edc58d63","sha512":"057ec39479079d36d9a4a9736a6a593938c92b39135ff898d7426c98aeb8abc8a9bf91af90c47c53083451a6c2106122bf2c9dd6e878f1bf60840c16899c1ff6","ssdeep":"384:00wPBQeFB6ieG12qXoN5s80pp2EkIxhXi63ElYgav+CGk9ubTOJhrt:0DFZeW2KoN5s80nXiplWbCyJP","tlshash":"a692d044a0a6f4c3149cee2830fa659b9e46dea9c2418005f6d8818f53346f05eb7beb","first_seen":"2025-10-12T02:47:43.486495Z","last_seen":"2026-03-18T11:50:35.164114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/region/content","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/region/content HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897400.2215996276843114\r\nx-sign: LBpCSETIw1gZjxpgUmRKeOOtaqsy2KMGNsPZmWEOkK8=\r\nContent-Length: 17\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":17,"data":"Name=INDEX-BANNER"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1008\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=waqg4bopk2zkjb2rujtplq0o; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:9 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54866\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"912d207ef4d91d281fd7a2df09973f66","sha1":"fb295a49f1e18e681bebe11d3ccdc8005c3bfbf8","sha256":"979f178657897a0775f70154fa2cf9ba4564e0d6e0b074963aeb8fcbdb9c00a8","sha512":"476d41a72ba907142b493806acef7db4d174ea6e209cb86015e36969b17a783212415a335e5e006b6ebe8383570ee9ebcd06d612ebb966c58b43644ccb2ef03a","ssdeep":"","tlshash":"f311b49323e24d5807191a4019eee405c79c728fdac3de90b5588f98d2ff2ce62621bd","first_seen":"2026-03-18T11:03:47.38514Z","last_seen":"2026-06-13T12:09:18.621844Z","times_seen":19,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/sitelanguage","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/sitelanguage HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317906300.7923276771498912\r\nx-sign: EOgeSYFreMNtcxIl6auDuZXWeRjdkKdSTdTWZtTQqY8=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 301\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=cbega2ypd5yew553abavdahl; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54934\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":301,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1ce88ff6f9ea9c31338d5422d87596e","sha1":"f18983399447afe2cb60dac1b80179703655d907","sha256":"95360f623a8ad7003ca777770b728fe3c12b97ed3fcb58a4eee143255462eaa2","sha512":"4023c0a3eb70539600eac2f58a5db6e52f8e546deb915be7cea908c809cfcbab1a87dc8f64201b96ad2c533b6118a64b7833e7cf82f9de1fd1e777ddd2498e97","ssdeep":"","tlshash":"d2e02b0805291c2f37409fb2303f1c4939f820cb09d29e2ac26e1f3cc5cbc080067152","first_seen":"2025-12-23T05:43:11.660579Z","last_seen":"2026-06-13T12:09:18.696535Z","times_seen":22,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/fonts/themify.woff?-fvbane","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/fonts/themify.woff?-fvbane HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/themify-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff\r\ncontent-length: 56108\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-db2c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-06-13T16:53:10.117441Z","times_seen":29719,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":273,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/news","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/news HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909630.7170254488765956\r\nx-sign: iYtfdy0C+lHBBKLlJx6XW4/tUwoZKk6Poy326hiePjc=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=vqupeu0cyn5etsnamoruxzpp; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:16 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-06-13T12:09:18.591338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/bootstrap.min.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-26eee\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"1a5e2c5cdd1960a23b48dc9e49f06dca","sha1":"b9774e2c71a2c09b6dffd2c0edbcdc9fc6b59037","sha256":"b23a5e62bb16bd36bfa1555d3f741821201496ac4b6d2cc974549568adadec88","sha512":"fbf67ec058169b336237ff96964b62821d8c5ecb2d5da6e592007cdc5b48cc8c87119d22dfa7d11ddbb7a2b8a6a2a4a749ccf436ffccc0d8e53cb1b5e62c7cf8","ssdeep":"1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26g:a7Za4GMq3SYiLENM6HN26g","tlshash":"09f352a6f5a0312de467c61964d0bafe152f8245d7224bfbf827376487892c70a73e4c","first_seen":"2023-04-26T14:25:33Z","last_seen":"2026-06-09T22:44:55.065783Z","times_seen":259,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/responsive.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/responsive.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3da6\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15782,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"ce7c78feed8b8264f69c18103ffe9edd","sha1":"516f20145c549eafb18c1e16eccb386b01e84e30","sha256":"8e1efc36bfa3cef36e9955a81fa9cf1f8407a203803e0f2d07046b6214e7b59f","sha512":"eab3c1b57f318b91a8ed1142a756b2caaa5efca69a1f281a69a8a01a09213b05e7a629f0fc09fd7b880b19f12c491e414e8b128881fb6cbbcf88685d87a41a93","ssdeep":"192:tFDR+NHpKXqheBEbREXRuGffX+xpKtArnjRCiR/X3zC9Ys+dm6IA7NTynvitizWO:vDR+sKRaqjRC4fzzEv1ZWj+uVdy6+","tlshash":"8262bb8cf9845001a2356eb2db772a97fa4854b39e4b05e178b09154dfbb5fc9282fcc","first_seen":"2025-10-12T02:47:43.493406Z","last_seen":"2026-03-18T11:50:35.073742Z","times_seen":3,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/skill-img.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/skill-img.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-668a\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26250,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"3c57a550ebd55b5313a3638303f1c707","sha1":"50e1ca46dd3a333c586427ac4dbb37bd4f15b645","sha256":"a0a81940475bc36fe14d1546b1f6c8c3dc673bcd4bac8a9c877deb56be92d6f3","sha512":"2c4169079f076dd99196ccbd15a8df8350a730d4c389f31249a3568fc351974e2c90f061a467385b7df33d39ee89f26a554ab6176ba59333a0ce9ba81928f4d6","ssdeep":"768:XJeqhc66MNXoqA1dnW4Jlj5W8QWumOl6qwL:XJHDsD1A248Sf+","tlshash":"e3c2e1ed064b60dd93df21830939d63bedd5c112d944e9bc03cabe706e5aa83bb46065","first_seen":"2026-03-18T11:03:47.442619Z","last_seen":"2026-05-10T01:45:37.186525Z","times_seen":4,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/meanmenu.min.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/meanmenu.min.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-a3c\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2407), with CRLF line terminators","md5":"571e2c15d45a5393285c89fd423aad5c","sha1":"f41cd64c1a4bbc0e618683701beb3049368dfa06","sha256":"202eeb028d88997605e6852ff73b5bef4b7becd4c4262ab3bb6db0000bb6f349","sha512":"03cc50e08b0f94ae1b3503fbea2af7c4d3851398bf6e65c417a44b7ab1bcc80c7869e56b7261b2766bfe05f152f5dae3e3878cebef87377b8ddc88a73e87cf60","ssdeep":"","tlshash":"4251bc62d5772028bfed8168e802d36d79f4a01bef0bc9a8ba7ce125c8853c975555c4","first_seen":"2025-10-12T02:47:43.501748Z","last_seen":"2026-05-09T01:16:58.826541Z","times_seen":4,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.counterup.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/jquery.counterup.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-42b\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T18:18:13.25756Z","times_seen":11468,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/2.672a1162769c57913824.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/2.672a1162769c57913824.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-bba3a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:13 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54828\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":768570,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"4efc9ed46e06ab4594531830f769621e","sha1":"cddee92b894288ebb1b8630136566cb78bb047cd","sha256":"c6e3a1c9cf8f9d1c038abe117b50b8bf6912c5f093bdd3312f5ce20d6522810b","sha512":"f5e0e97d52cb31122b634aba4075bb7fcffd397cc22b68a72542fc5191b1989b6f47a8cc21556f9804f68ae32e3962818badd5b49d5215145a11487c71bc27b4","ssdeep":"12288:i7ko7IW+z5dpnOib888GuiKa97r42kNUbb2VclKR2X0HeAggd6j0o6E9ILBqM2VB:i7ko7IW+z5dpnOib888GuiKa97r42kNo","tlshash":"5cf4e7de3a0a042a9433ef7a3be5373812a96753c425195537ceac83cf1a7f021597ad","first_seen":"2026-03-18T11:03:47.335719Z","last_seen":"2026-03-18T11:50:35.114533Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/br3.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/br3.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-ea7\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 83, 8-bit/color RGBA, non-interlaced","md5":"c23b3e642659e8fbf9b52374e09ec741","sha1":"038a0f7f21ecc58c72d8f60ccf5c62b26432403f","sha256":"bbec8a9c75520884ac1be16a79e0a482971f0716550aeccb9ec4e56be3cba91d","sha512":"918d19191aaa10edfd717938ca73ed8813a15a11ccd9b796d1706bca16eb5bfbe92729308bb37c92009b1f5f29a265d1cc8c0192f501d259acfb83133aad5fdd","ssdeep":"","tlshash":"e7714bd85de3b27b65ccf80411fc48b3d9150cc86580725269caf42b0da56b4936e9ee","first_seen":"2025-10-12T02:47:43.520524Z","last_seen":"2026-06-08T18:47:35.23407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/br4.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/br4.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-f83\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 83, 8-bit/color RGBA, non-interlaced","md5":"f5a9e03cf6f3e132ec06a4442b806759","sha1":"7b0453852f91ec87d3e32740161d9ce46b3aecdd","sha256":"5437abe4e50b832b89ee000207acc950c425a25cacfe53567d7fef6f3d10fc51","sha512":"908080c36d19e4ecd092a7df1a47a5c237089d6df0499116fdfd5e2296421a8bb67e8a8ab792fce1fc26a68a0cc1527574e8718ae262f0a7053c30786e508a5b","ssdeep":"","tlshash":"1d814c99a9017250b056f9167ee5cc07ff2248e0c3d4315a6c07eb03da75178766e5fb","first_seen":"2025-10-12T02:47:43.511909Z","last_seen":"2026-06-08T18:47:35.223367Z","times_seen":8,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jingcaiwang.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 366326\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":96,"dns":0,"connect":8,"send":0,"wait":11,"receive":7,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/speed_test.jpg?t=1773831789350","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/speed_test.jpg?t=1773831789350 HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1591\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-637\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:13 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54829\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"14f643fef8a6d61e5a017a5b9e38b42c","sha1":"eb6f77a94bb87ef125ae617c204b0225b3fea49c","sha256":"d711f46f73acec3f31eb0e7d4f47d05226ed6000e4a29e2ca382856f3aedaa15","sha512":"dea6e71702af91128aec18cf2e398a4a7e3ca4bd1d30943999e4240806477fd01f77497de646ee1d23999910ed888dc3dbe8f757a66981b3d5ca82c58fa77a0b","ssdeep":"","tlshash":"7631021af9a1bf42d8a6e87035f2402b9a11ccc8a8c5e95ad8f9c4261e750f10d7a5cf","first_seen":"2025-09-26T16:19:50.843517Z","last_seen":"2026-06-13T12:09:18.617472Z","times_seen":29,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/host1002.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/host1002.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-3e50\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:13 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168503\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54793\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15952,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1233)","md5":"459fb0e73f13b903624b6575aa60f19e","sha1":"b7e12d188f6f304f072f3dcf9a4682b3d95c0c1c","sha256":"c7c9313039f59e4cdbc2ee408bd8af0868052e6dcd367d507b29cfc6b1483cbf","sha512":"3fae179cec6f787efafd76e40eab74f57171949168ca435a2b704fcb81e6873516b06e71606e649395b641d1fef9c4939a092f3578313fb4a6c9774ff8344d49","ssdeep":"192:H4Xv065altoBdjPg1fVC+hIR4Q5JEtQ+UUccKKSeeaaiDpFFRvvbbX5jbfjjXX5n:qv09Ad4Q5wQ0f6VGizX0j/SEzTV","tlshash":"8e6218a9f44d0ac6626e7e3cd0ee69a45a1da1b2e2335533c853bd710897243b370d3e","first_seen":"2025-11-23T08:36:53.370816Z","last_seen":"2026-06-13T12:09:18.614775Z","times_seen":25,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/app.553e32f2bc923bd0f9ce.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/app.553e32f2bc923bd0f9ce.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1d8b5e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168504\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54798\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1936222,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64992), with no line terminators","md5":"9c68a5e19629d328aeaf4b076a26c76d","sha1":"343721cb29dd311a9bdd6ac767f464be40926097","sha256":"906d413bc8e0436aa2bc3ccd7ddae94c3140d486126c821e13379081952d2c34","sha512":"c2f6d28a135c8d68656938c6742c2b4a250d304347dfb1ae040d4c89e1095b548d850b7907e5085e6e16c8d4399eebe601693b20453df4f931b1505603a529eb","ssdeep":"12288:73ySxA7p5709pbo9IsKopCfploYq/9AUlHU3B9B1IfseVKVofekXbrm4K8cZ9x4z:DlTveVK4qtWhSmfVHr","tlshash":"82457c3eb28975b84d522611301f35746db52ea7f906c0c0babcc9c667e4e58821bfbd","first_seen":"2026-03-18T11:03:47.400653Z","last_seen":"2026-03-18T11:50:35.082425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/fonts/element-icons.woff?v=535877f","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/fonts/element-icons.woff?v=535877f HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-6e28\"\r\naccept-ranges: bytes\r\nvia: 1.1 PShlamstdAMS1iz29:5 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54876\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28200,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-06-13T17:54:10.79123Z","times_seen":26135,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T11:03:04.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":46809,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"49f4400fc7e6a1c083e69405bd588c5d","sha1":"97937615aeb168e72dcb1e4cc96aa2d2a776fa7e","sha256":"fc279b392fd6ba198f2cfd03a71084b8cf7a8844cdf143cc578a033222a9674d","sha512":"7ba768c9b7c11119a7c653e857dbe19f48d2fbca9b50d920697ed68e5aa98a8e69d524a661f18d645860680cc46d2da629f5214aa24e70002744afc0ad4de756","ssdeep":"768:gXEW/4OKOlOdBOveY34S4Y4z4z4z9TEnV:gXf/h7kdBOve04S4Y4z4z4z9TEnV","tlshash":"9723b826748c92bf061346e74035279aa08fee76eb638467f2f9537707d7c09a903663","first_seen":"2026-03-18T11:03:47.45103Z","last_seen":"2026-03-18T11:50:35.125765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":492,"dns":68,"connect":208,"send":0,"wait":416,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/fottor-bg.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/fottor-bg.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-4cd6\"\r\nexpires: Fri, 17 Apr 2026 11:03:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19670,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x466, components 3","md5":"9a9e29b59cff3e7fd542b0dfe05c0b43","sha1":"b6d928e8c49cd96e39ffdcb824f050b5cadfda69","sha256":"5884c7495d53f6b1a9b7f1aefd758f296a8fca38a03003bedcc24e484708ab4e","sha512":"3c4b316f4273187c2e168937e8c3f1607e7403b956515dca5d8acca2886e2c3ae6e7adca3fa593678d429df81c88712555e89bd3464c8c35f50d1928e95b2903","ssdeep":"384:hTM0iREO0r897EcRYsyxoNhUvAOJ5+CxN:dDUl0o7eZvAOJ5+AN","tlshash":"01925c8feea0df72c8c59b7024f27662693d6026d7cf8aae51bc488e10503f90d6d646","first_seen":"2025-10-12T02:47:43.496159Z","last_seen":"2026-03-18T11:50:35.081824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317904790.3822962511148109\r\nx-sign: Th6CoKu7C+kka4cgFSLp64AR+hhj+oaBnh3lIFYF5Hc=\r\nContent-Length: 7\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"ID=3556"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1596\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=xqv2ituyeuszs3ptyrmukdra; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:17 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"64a211abf939545f74e8c38770c88d1d","sha1":"0d418bedac738e429de19781ad8a14fcba339e83","sha256":"c7db9c1d9da029f9aabc33e77123679f6a46a6444624f7e96b0f7fc6dd4d0df7","sha512":"8a65884df4eac7d68fdccd175979c50836fe90b7029506f4fcb4719ddba47d4305477daad841108b0e2488eba08f6e438b597dac41792d0653854dff50dfe45d","ssdeep":"","tlshash":"3731dfc6ebf41ec609672980ddb6f11db51962580c0a8b3b9c3f02eac758778d457716","first_seen":"2026-03-18T11:03:47.333143Z","last_seen":"2026-04-07T08:47:39.640822Z","times_seen":6,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/getcurrencyrate","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/getcurrencyrate HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909600.8116870737786606\r\nx-sign: 7WxjNTat92U+YLVo1v9VlyeJ/E+fUSR72kzxTVim+8M=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3963\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=vu4bkb0byon3txvald44flsu; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:17 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54950\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1daf033d751c5f7ca15a8aa98eb8edb5","sha1":"3ff61dbc09dc487e7e14ea2c643b236d464e3ca7","sha256":"dc198292bc573c4c6bbb69b49b7c2fce10d5fbf2d5fd958e536a4b4fa97daca9","sha512":"6b69467794abbcee647aceb8426327b438e2dc852619c8deecf7179c7f342dc5331baabb9155cbd47864b794caf6dff2408838f3e8a7a7232da18016105e1244","ssdeep":"","tlshash":"6381d98d245a18b5c9e35ccca5db6021172d73dbe4c38e774b9e1fec1260d63540ee6a","first_seen":"2025-12-23T05:43:11.644518Z","last_seen":"2026-05-11T04:30:59.380589Z","times_seen":14,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/webSdk.produce.min.3.3.5.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /webSdk.produce.min.3.3.5.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-144fd\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:14 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168498\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54802\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83197,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"f6bc23178310ba67f36a591b9dd5bcbb","sha1":"8a5e9002764f9c2f60a4f3bb8259455bad0874f0","sha256":"0540037cbf821c47ec2724c7aa3957069ba61482c8bd7013b325410a5ad2ba58","sha512":"53f852d6550ddfbc95e84e55097479644a9ededc607b06022e3894dbb1952693f95704d13592319ea4918c269285eb07409568e79b2d260c96a07925ac6e271a","ssdeep":"1536:rZSxL4lC4Ui/jdRVEBiZ4BPPJPkiN/CSEUGMl:QZb4H/ZRqBvJ/N/C5Ml","tlshash":"1d835ccdbac9753403e7a965d27b101173362411d9058228f2ece8e6bc3e5cb6167fba","first_seen":"2026-03-18T11:03:47.378267Z","last_seen":"2026-06-13T12:09:18.626246Z","times_seen":13,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317893970.9679400239896346\r\nx-sign: YC5P0giHa1fIMyVEWSez2pujXMYwLNOnoqmW7Ch2DVk=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=zhy0dljigngacdwic5iirv4n; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:1 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54836\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a8e8faf994855d897162846c51d4c90","sha1":"60fef599c7f7c6fe6eb891f3969cc0a5d599cce1","sha256":"f5b8209d7d2231b305a14b8472ac6fc8858457d76b010731e52514a044b6b870","sha512":"64d3c1e6cc2ee790218b995fd7860020b4b292358b5a8be9292f527d26ec98ea9b6493b34ef91ced51df702c52a4a6f75a57102beb01a18da508cf55754e97df","ssdeep":"","tlshash":"c231ac4f922e4cf69a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.350366Z","last_seen":"2026-03-18T11:50:35.08577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":915,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317893960.28176272122383705\r\nx-sign: ihx1naVFx4Cd6EeawS/tZTrwdLSBTD/C+EVzSPVXH1A=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"SiteName=9d1.pro"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2575\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=2f3kuqr5k3cftbm1ki5w5lhx; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2575,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1b19499f2a4c694be4425bb57ecd4142","sha1":"8bf90fe8cf5df18c00b6cbfb1efb8a2921f7ee50","sha256":"01bd7d58facac80e73e8a27adc59c3cd7046a649e4a5488269b4036dc229715c","sha512":"8a1732b9ca4635464190c2559697c7ad1c855a838b5c18ccf55921596216cbc5e84b993a4ebd2d3b9bafded23af94a9ae9b0f8e295c4d4816db2fc155b6dcb8c","ssdeep":"","tlshash":"20511092279318f96b0a22d5598fb80b848e231fcec6c754f5594e4841ef59a634f057","first_seen":"2026-03-18T11:03:47.455203Z","last_seen":"2026-03-18T11:49:34.328685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/ajax-mail.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/ajax-mail.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-4e1\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c33404ff582af3566828fa01cea710a4","sha1":"4f99ed39a76474d362d8db5bc4b4d0d351885cfc","sha256":"45894aadae79a441fde789bb2e18b3a3f972957a950c99fe61470e4187f5d6f0","sha512":"fbc3fd12030006710e8c01c04aa211bae13d90af86f2d26e224026e4ad8412dbe4e9f0ba13b50f1d639ddb2a6984cd7662af999d1cf17772acbf2c5acc60b50b","ssdeep":"","tlshash":"7321af847e6f0b6e1a47221476fd72c9ff2cd2728607662aa7e9086516841cc17c27ee","first_seen":"2023-03-07T01:28:41Z","last_seen":"2026-06-11T08:11:50.913128Z","times_seen":259,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/nav.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/nav.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-2274\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8820,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5853), with CRLF line terminators","md5":"bd6e25914069d275753d2a95d06ca9af","sha1":"cbdafadf508d251253e576416d11e8ee82d3eb40","sha256":"2ca68f93d537164259ebb629911c966edfb213a2bb924ef735a1f3b15668d5a6","sha512":"cf35fcab81166eaf37d68a593912b68be14f1bf4d01eb5f578e3bb31c42761eef73bbd825f5602f4d44deb46603c9d5e11f1ca7998a9d87a306f69db3ec7978b","ssdeep":"192:oIF2Ey0Tai/cIV//B3fzDKiH709i3qHPM4KgZNg3V07pNSM9:oIFy0TaijVnB3XK+709i3qHPMJgZNV7T","tlshash":"eb0240556208733241efb4aae40f138f2532a6b55703c0c5a0f8fee96d3a57697c3e98","first_seen":"2025-10-12T02:47:43.529227Z","last_seen":"2026-05-09T01:16:58.861162Z","times_seen":4,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/webfonts/fa-solid-900.woff2","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 75728\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-127d0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75728, version 330.32636","md5":"44d537ab79f921fde5a28b2c1636f397","sha1":"b2879f9e1d0985a96842bf7f55a2b2cc4c636d04","sha256":"3d1080625d3030e88357b3ac9aa377dcec23f1b529c4ad03f7a9a435ccae04be","sha512":"08836d89ba7c7b7645c9de36e2e856cdc31fbb1c3a4a83045848d772720b98d352fb11182471161ef07d01739953a6320355ffecf25a06881bb1111ba02a73cb","ssdeep":"1536:sFUt//lLi8pq0MWeLhkzipMZ4LbW+nNjzw5ytuNCNbqg6g4xNRrFw:99Zpq0MWGhqa/HBnlz8ytuNYWg6ZRrFw","tlshash":"32730235ca0b7289b178227b3cb16645b72981c25e5bc4529f6fd3acdb0518c35f07ae","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-06-13T16:56:38.240552Z","times_seen":9711,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":259,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/maigewan.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/maigewan.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 337\r\nlast-modified: Tue, 17 Mar 2026 04:05:57 GMT\r\netag: \"69b8d325-151\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"69bdf52a1ecd210da01ee35731f29cad","sha1":"cfecdf752f8115fadcf2409fbbb362f15eb90276","sha256":"e649b133500fff6d6f8ce83767de94d2840ecf375529ca910ba7bd5ce375367f","sha512":"cd86c4bb3ac49ef66b059621839d0b22de308ddc648d46a0dbfe4184863d84e47931bc7e183ad3457a46f32792c3396e69f9c0a385e501f49b697eb29cb2e5f2","ssdeep":"","tlshash":"08e026bf093710348262e09e31aaa6483af8a01ab612403a94bc84968dd8d9518f678e","first_seen":"2026-03-18T11:03:47.377092Z","last_seen":"2026-05-11T04:30:59.236776Z","times_seen":12,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/home/green-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:11.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/home/green-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 12043\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2f0b\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:15 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 133958\r\nx-ws-request-id: 69ba866f_VM-ARN-01Kmy5_9194-54967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 123, 8-bit/color RGBA, non-interlaced","md5":"e9958d2db530fb00f7528a0a84441244","sha1":"7effd051e4e3e1b8acb228539ec625713a25b205","sha256":"c2440ff0a066cac16a80b0de47b466bbdae9fd7fb68df2723e720047a2af8a23","sha512":"e853d76bf4991d5294bdc45210c9a176eaed6453e51e2f30859ec2dbb07bae0bce27ce865fbe67bd8fa3baec765fd2a53ad33d21908fe65c3a5c6f6c4a28076b","ssdeep":"192:f7FZuY5WRRKG1wJAq6y0jh+vlcf5ARrNgAgbsTorWfAmZS9mbu:frLwRt1MA6afiirWRZ0m6","tlshash":"0842c0c6f49d6b074defbe8158c1473ac1254cd5eac88a205c87adadd3d546c24698c8","first_seen":"2025-09-26T16:19:50.807711Z","last_seen":"2026-06-13T12:09:18.686387Z","times_seen":26,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Mar 2026 11:03:06 GMT\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19330,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8fdeac544f4731ef609f27369d3e0c1a","sha1":"433f337b48cf206942c816b48f8eb2ccf5bc9063","sha256":"7a7014dbb393833f26ce006184534d1ad193f00b59fdcb83ed273a2019512f11","sha512":"c8c0ddfa0db00305f0a5904e7dd69e6a7b30a008516bab0094dc1ef877f384ac0b9de41fcb34af2f37f65c34ed4c3cf1e3ab6686b862eaa208179f0b9aa921e2","ssdeep":"192:Ang5wnnFngnPunBpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFb:Ag5wnFgmBnd1oWQIOrRPQPTzajdfMfPE","tlshash":"1692ce91105be500e6472cca23cf7e26dd4e21627494c5797ffe2ca8adeac220325b3d","first_seen":"2025-10-12T02:47:43.556033Z","last_seen":"2026-05-01T19:29:34.752676Z","times_seen":4,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":120,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909620.508993505972391\r\nx-sign: NCaT9RRXraAr6hdaepbpbPjYSUzECnF0MRazABuIr4M=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=f3n4yjibyefm5ixa3tdwbmke; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54954\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-06-13T12:09:18.591338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.meanmenu.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/jquery.meanmenu.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-fc2\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4034,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4034), with no line terminators","md5":"d4f94c3275eacb6a8338747442b42832","sha1":"de8080ae015d007cdbc9a54a328d8b9e6b658ef8","sha256":"8ae6b70f7800fd5253c9c7af41cd1db0ef8b80e2e1ac9d4f642ee237e1086c4f","sha512":"f9eaad89b2077fc62f933423b1d1216c6ee07791170b1b3c79dc91d5365d25a9399dbceb738d0bdb957a0732ae746981fce34f52dbdd4bd0ad8303d34a752929","ssdeep":"","tlshash":"27812062757084fc24bf94e6f43ee33632f7a40ef44ed400b17aa9b63466a851063ad9","first_seen":"2023-03-09T01:54:05Z","last_seen":"2026-06-09T21:04:28.374453Z","times_seen":151,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/#/","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:08.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoom-jingcaiwang.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/html\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-125e\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:1 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 4217\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54758\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4702,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (717)","md5":"c288e68366d08413d91f10e27f1e696f","sha1":"cc8c790bb98cd267db3a1839248f57d5648399ff","sha256":"03c9dc2af1eb8675be73b08009ae7c2fe000453cbf17f202e5b799c6018852d0","sha512":"1bb1b78d5a76b6de983141dc2afdcf390d134983886f4a7c7f14dbcec3a2a2d67b0fb2a757b8d8426017c98a65380aaaea18bd9df1eb4b94903a3d59489d0b3c","ssdeep":"48:b3Xh9PBTXl21zMiDv/qt9SHi0A5QDwUnqFOl39VE/Md2IP7xAPwqhKYNlrOGl1Fz:zz1Xl2taf/QEufQf1IYvr1tWPV/Gzow","tlshash":"49a162791e42c035215398a82b7bd2417899f127a204c800fdece5dcdfd4f8a4dbbae9","first_seen":"2026-03-18T11:03:47.282236Z","last_seen":"2026-03-18T11:50:35.119663Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/venobox.min.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/venobox.min.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-4926\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18725)","md5":"1003c73973bf3d7bdd3bfaa1b8c023d5","sha1":"40a3fb87c48dc15625a36a583387e8358cb18ead","sha256":"799e0c5dec4e18fa7d193e4fa7b1f9ab56a7f78751a95bce37ee8a436e699a21","sha512":"7bed32a80814405a11ac9e296628105e9384d12ec9f481b09a01fcd358781f9383a8e086f3f1917d71d0fbd69bef9e0d2fbf4eef00f0763c18dc2714f2c10036","ssdeep":"384:HSUvC+hAidpkzh7rgU+QJrlh+ftFXTjkXhTriUY5+KwHCAD1DGvT8ob3fUpxr+9t:VC+hAidpkzh7rgU+QJrlh+ftFXTjkXhM","tlshash":"9c828eb308d221c6d8134f5293dc0f64563aca635b224edfb355349e8386faa13d667b","first_seen":"2023-04-11T08:21:40Z","last_seen":"2026-06-09T11:43:55.039327Z","times_seen":468,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/team-7.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/team-7.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-417e\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 390x220, components 3","md5":"a6ecf3575281731ef23737c051d943e1","sha1":"43f10a85a4ca73a5207885ef9dd2ea0b5a0a028a","sha256":"50281be31a674780a12e95c57753ca0c8f1aaf41f83ff1a3dfe1b46be68b7eef","sha512":"b6d51f2d9e2799126a43422ca610dbb221515192d9b1c8fe6e86daf5ff12c69dd850569e900c76c5d47981f65f2ca7617bc0db52e353b8b52e55dd7e815e795e","ssdeep":"384:SYLU23AaDBTgTkm2JZdBBNxmuLPhw1i8HIETIw81KA4XXX/:nLU4DBTokm6XnPh2iKb8QA0/","tlshash":"ac72d08c1480b3f1fa1b233894205de0b0f9ad57366a8ed98dea4b86fc46473f559c16","first_seen":"2026-03-18T11:03:47.46114Z","last_seen":"2026-03-18T11:50:35.098974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/flaticon.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/flaticon.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-266d\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9837,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9792), with CRLF line terminators","md5":"01d28bd3e2bab25abc79bea52ea59c50","sha1":"83757c4a044346c056b55a218429fb79fef066a8","sha256":"eb385eea924026e74bc089322e4ed8581d4b933e56e0c6278d1a3221e2c77e09","sha512":"6b89fb9ab073ef6474022cdbebe4b46656ea18eda1efca246b00e8fc15fa927d13ae089ed9b20bd34eb23d5ec5e646acb14adfc83a2dee31661741b13c019929","ssdeep":"96:wSvVwufHJb9VKbO7dl+F4AFil5M8mh6e9Kf5RjMw4z0u:wSvKyHJWbOxU4Em5M8q6zf5hz4gu","tlshash":"1112a8e4d46a01c4ab32ce0bafa97248e695f02dcdc1dc55f05a4a1cbdf2b511386ef9","first_seen":"2025-10-12T02:47:43.499018Z","last_seen":"2026-05-09T01:16:58.823662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/team-6.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/team-6.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-150b2\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86194,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x500, components 3","md5":"7853725563cdadfb2ba8effb5cd1e2d9","sha1":"24ac9df4d00c721364b68b35ac795070a84c4e5d","sha256":"f2cc1da967a31c43eed469f7659bf0ba103bad006d758947953c01d4364a17d2","sha512":"4713b0f538f0d2f5d2dee0ef4d37dd782615aadcc32ced01535c9f0b225f2b946c0e0f1b9b07c2696e56c6fd0e5ab0cc7da5934e8534ca7df77751431b65a985","ssdeep":"1536:9AL5nRyvo74AJjLHYnnYv5MCz+iy751d9dX1yhJ9rvHQnol:9O74AJ3KW1+D7Dd9N1EJNvHQol","tlshash":"9e83028e9218cd7b634428c7e0bc8d329bcce18d5b09e76486c37bcc44da729e9c665d","first_seen":"2026-03-18T11:03:47.463132Z","last_seen":"2026-03-18T11:50:35.078733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/bootstrap.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/bootstrap.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-ea6a\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60010,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59729)","md5":"61f338f870fcd0ff46362ef109d28533","sha1":"b3c116c65e6f053aaab45e5619a78ec00271a50f","sha256":"5aa53525abc5c5200c70b3f6588388f86076cd699284c23cda64e92c372a1548","sha512":"8c2694d03a7721b303959e9fe9d4844129cead2b2e806e85e988a04569da822ec7a0e2ec845d64c312d3e3ec42651810b1336aa542a3e969963b1b2ef65dd444","ssdeep":"768:uoYGDyGi43HVzdR2BmDb7zTNilqtvY1xWiDLYjQVW1/MVOlKvnxFa+B0+:uoFXOCx0wNGaYk+","tlshash":"c143c80a72547873059fa176817f420bb736798ae90a826cb91d98dd1e7cc893237f7c","first_seen":"2023-03-07T01:02:23Z","last_seen":"2026-06-13T17:39:56.059854Z","times_seen":12989,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/onresizeRem.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/onresizeRem.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1432\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-598\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04a92226:14 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 168505\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1432,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"f2582d19f3d21f07913c1116075b0e3a","sha1":"6cd2f78b49680c4f750a632dc104116b3ba9a998","sha256":"9a83d7f070b1ff3b7d83bc1114cd8b760582c8aabf864d5ad899a084786c1c79","sha512":"8e3823d064ab863820766a7aaf369421d5fb73539a0f63f1a40bab4c3a69a2808f748a37286a5ea4e3581346c5b1159955fe43cb8c4714d351981019406a7c6a","ssdeep":"","tlshash":"cf21cdbc2be6143142236464397fe3c43d764017654b6646b96c8fc98ff0e818a62df8","first_seen":"2025-10-05T08:20:38.62442Z","last_seen":"2026-06-13T12:09:18.660363Z","times_seen":26,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/gambling.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/gambling.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 6523\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-197b\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:10 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6523,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 294 x 76, 8-bit colormap, non-interlaced","md5":"588f89c42a31b93899c6968c0e4f97a4","sha1":"28f4a4ac81b88d6982c940ab929c0be1bcbfbc68","sha256":"dad547e94675c75d2295fca8a31a788de79e20656e8e6409f560f73826befcbd","sha512":"0f9abd6ecc5dcb89059298ba2ab208d7af2f43f29011e72a76229644e914e0a94b9c2da11a3a9d2a9569809c24d56e15475b138380f0ae7451fe16433f3f7163","ssdeep":"96:vRH3ZVp31Eex/kKI2pGiIcZ0uWPNf0g6B3qRzr0mQI6XtYtwMY3ths2v/0w7wXi3:vnz3yG/kKzs6peR6B3tYGXPSKwCe3gl","tlshash":"a6d18d7c6e12f4a09ef9b7921c382b078e6efb46cb345315906ac651213d00edd74a0d","first_seen":"2025-09-26T16:19:50.795645Z","last_seen":"2026-06-13T12:09:18.709146Z","times_seen":28,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/login","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/login HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317903820.6040275096467804\r\nx-sign: VTSBvuNrfPb0sUr4Fqin/zsbRs5dwl0phuYw6FfnKqM=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 107\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=zv3ow3fl44w1gbztnixvl4qn; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:10 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54908\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":107,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e795d6ad4563b5034f4ea2556c9d10f1","sha1":"cad11f9811c63cdbe33526c43f32cec6b3d5cacd","sha256":"f0b1d85873d76bdd702da0b21c4580395847a745e128e4d191d09d5ba5d1021d","sha512":"1ea11e2e25ce35e072276a3d374958cf8c3acc98a7c52cd700fbf20d6983fbfbab0b5312af99cb239565f58326439f629ffcda52458c4a19ba9e3f0eb62cd08d","ssdeep":"","tlshash":"aeb0925d858700c3848440ce0422cf8250c0a8321c1acfad8b180968c5e552e178b976","first_seen":"2025-09-27T10:23:46.30918Z","last_seen":"2026-06-02T02:23:21.29364Z","times_seen":14,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/events/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/events/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317894000.9908548854904371\r\nx-sign: W6ya2I9WeXpM+Zg8WXzpWX4/Yz77l9FJbnFTDkKJM6o=\r\nContent-Length: 39\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"pageSize=100\u0026pageIndex=1\u0026Type=LoginOpen"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 101\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=ced5wdfep5lsn5xsu1g1ekfq; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":101,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30695ee25801136134ad0c4aef887301","sha1":"1b4d4d25a27646f1cca0c16649ce907d44eb7d94","sha256":"554c3c78979a68e9fd51bc9766656a46330cff8a2943801d861ffe55fa250282","sha512":"35ac645ea56d086cc4582e0daef4eb660ddb92fa21576a6ff1dfd49e1aadb6f5c14e07c0d7e6a3e46229d3acc61612d717c211918531d1a51ab3ca14af03ab0a","ssdeep":"","tlshash":"27b0120890191843f40dd00776633d031c8870034d16176d41fc131cc9a1c682582904","first_seen":"2025-09-26T16:19:50.860786Z","last_seen":"2026-06-13T12:09:18.739609Z","times_seen":14,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/notice-icon.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/notice-icon.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 5071\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-13cf\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 83, 8-bit colormap, non-interlaced","md5":"d1ede92ef26e28b323f9800ef58575e4","sha1":"7648ec6c14d834cf26f85fe553b4071999265c07","sha256":"1f1da38392d1a28c94e6def76b245fa1f2e12d87963e5f22b6a255103ec6129f","sha512":"43c427269904b44788eff71b4f558dd760029137203ed95f42d7cdc9f43b43496e43409780752d6ae524b86b63a562dfed041caaa093886919652983a4265d3f","ssdeep":"96:5yy7BrrIkpNd1AfTp68ZZyYxkueBmZfz5Rfkv8FSOD9q13rsGgzw2H8:IKrTjnAfTUMtauT7jfV9o3r8zw2H8","tlshash":"a5a17ca9a05586e70c54c21ab0efdbf264a325710ef9fd6f3163edda405062002c5faf","first_seen":"2025-09-26T16:19:50.832251Z","last_seen":"2026-06-13T12:09:18.701859Z","times_seen":27,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/getlabel","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/getlabel HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909850.817189312680579\r\nx-sign: 6NC+2nEdMET5yMPb58r7hC/5xWUGTHxuzG/zdRPRE0Q=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15524\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=bo05wds41nmnjsuu3jrijq5w; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c23accc7bf2ca3b5f0862981d6e598","sha1":"c09b8eea2decb742d5f8dea35fc66a4c713fd737","sha256":"2b17e553c5ff4c419efcd9829040fba49f9dd4870dc224900a823692411ca9cf","sha512":"bd9431c1f7028ec95a40acf53663de4197762bc987454ae787049575183c3312866d4215aedc957a60b98708ac6f2167b92bfea5cf58959bcf09deeec0c48c23","ssdeep":"96:fLfcAmSmrQqHHFINXutQgeTgLmi5u7eQDjjNuQCe0q/Va4RSUmXu8+4VFabd1dE+:D0YuagKiWHCkixyWw3d9lZi6c2Q+m4","tlshash":"8b62a36b03db6c8f0b665ac038cfa80ce44d119fc5c6df9da12d9e1da6bf1a650ea441","first_seen":"2026-03-18T11:03:47.279779Z","last_seen":"2026-05-06T01:07:03.423019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":397,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/slick.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/slick.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-6f0\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-06-13T17:30:08.560707Z","times_seen":66795,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/tab1.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/tab1.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-9a65\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39525,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"470378c8328f9f12a5d196fc7425bc8c","sha1":"4b174e3f74451aff767449c342c2e0952412f9bb","sha256":"9de7d1c2030369df2a7bf456bff37faf3d4f21ba03bd401d0dcb049071b62cc7","sha512":"10b6b8c1d1f11c5ec3e1fcf20f373ef81d05d2fedd765b6cd563bd7a47ceeec078d3b337014270a40cadb276b71a72585cb76c0c008cd095d37e2b1cc4deb2dc","ssdeep":"768:EZSOXAYXA/3P/kYCp6+Fa77VOMwaalbIOnJm72wCLSR5ckmvOKUieOrg7:ELFw/3nkYC0+FYV1fS472Ls5TKOdieJ7","tlshash":"0603f2964aa29ee639e55b11340e1dc9f1b5577ef1400279adcabf060faaa0e4cdc520","first_seen":"2026-03-18T11:03:47.468492Z","last_seen":"2026-03-18T11:50:35.159688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery-3.6.0.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-15d9d\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-13T18:32:32.673074Z","times_seen":480975,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/partner/mga.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/partner/mga.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 12319\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-301f\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:9 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54854\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 598 x 118, 8-bit colormap, non-interlaced","md5":"0ddc35278a10242f9115a1551658a83e","sha1":"6677b716fe8345d9ffe415cfde519ab87eee433c","sha256":"defa20639fdf40459ed67efa8584903b5ae8aa41757337204c4ae24661759067","sha512":"0f913286ed122a90e18273576adfaaf4c9e435d4ff83d4a160c2fc606aa7ef437657420fea9c7d33a3329dc7f98fee023b54792416d08c93e55e6324355fc677","ssdeep":"384:Zx/7TFlv/zFkllHSXst83C1SlYPbO1U2NL6Cpy5/ZFFb:3/7Tjv7klHKst8AKYPh2R6Cpy5P9","tlshash":"0c42c0f44727b3ee0f47a556775e4d724786784cb020f08ae9c8a6950ea93d23305fc6","first_seen":"2025-09-26T16:19:50.8755Z","last_seen":"2026-06-13T12:09:18.735958Z","times_seen":28,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/home/yellow-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:11.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/home/yellow-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11921\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2e91\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Ub762:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 133958\r\nx-ws-request-id: 69ba866f_VM-ARN-01Kmy5_9194-54966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 202, 8-bit/color RGBA, non-interlaced","md5":"ab8f5cae46050c8818aec33253e42438","sha1":"38e290906c32f31faf30f916c6c823a40f5cceb9","sha256":"64d88738348f9a983ed4f3c2229a0eda8d60014893f5872c8bb0e840895206db","sha512":"c83159d93ff01c8628abb08c7620afb40768694ffec61667b770f0359ae01a7e03d40a0cc09550fc400b38996b15cd5ec61a91e7fa6129817f964e487032b956","ssdeep":"192:Z7F9807T9Al+xD3BGsXalflpOlh8P8/yLv0URnZTmjSv/Zxurxo2iKR+08BuzofJ:Zf7TRDG0k00+yLcpSXZxAo2iKUdBjk1y","tlshash":"4032bf1c9d208691d91beb1ca1dac89da32700cb49cfb2dd696f499dec310be746c16f","first_seen":"2025-09-26T16:19:50.82522Z","last_seen":"2026-06-13T12:09:18.685398Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/team-bg.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/team-bg.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3c5f\"\r\nexpires: Fri, 17 Apr 2026 11:03:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15455,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3","md5":"188a1031983bae99c79db5f846bfb031","sha1":"ad47dbd7cc1c3816043f6ee032341a333baa2180","sha256":"7e0529de716f0271a3a4c65b39528a1441d44ef057e8b37872d9473574b1300a","sha512":"1592579d3c2c3c9dced52e12846873711a01500a0d9369b467cc12015bfa0382162b25f28ce113dc82f48d35da4277b6779f7054753e335163ed2b3f10c6a43a","ssdeep":"192:LTTfKQKjcVrYgZw4XPZr1vrQFFf7Jw6qIRonpVpGcAtwmFGlirSPwGMGIqUsVcep:n+pgYgZhRNsZaLnpPGcZtY2/1Vx0O","tlshash":"b562cf20cba25ec1d7506972dee3b8a983d3e17082fd0bd59290770b917ec79507ab2d","first_seen":"2025-11-22T07:59:58.274768Z","last_seen":"2026-03-18T11:50:35.102821Z","times_seen":3,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/0.dd128be9313d67725825.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/0.dd128be9313d67725825.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-f68a6\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54827\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1009830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"8ef08aa91899f0c2e18a6e391d6be428","sha1":"63c4d60c860b78332c9729000d502d05dcb32999","sha256":"4cfce93e499a6434609e5c289794ef60fb04894d8b34e7b91c410d6637ec3aa0","sha512":"5f71b70f2a28c9fa0da326ec1e59dab620fd2efcac7974521af669b4b807860ba5e22bb9fb28563a29db26eb4c03a7d1d048779c5b8ee5d4f316ef45f92893ec","ssdeep":"12288:cTkrSg07HeJItqwOACRLwiWppjpruknaQIV:cY907HemRO/RLtW7pKUaQ6","tlshash":"a7255db43291606a07eaa0d7402f1b01ae7d5e2b640dc0acf62dedd72eb4b05e57b774","first_seen":"2026-03-18T11:03:47.327455Z","last_seen":"2026-03-18T11:50:35.093325Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/CNY.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/CNY.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2102\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-836\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04Snf61:13 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54945\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f9b40734f25f70370f063cc2b2aebd7e","sha1":"ca21192c3f260f649d9394e2d9e834a3af732516","sha256":"289e988a4ffb88a5c04df57caacd05100f4c5afbceb05c3e464b3ff9c0f1d22e","sha512":"ece2d44d107448d6a01a6caa357d4f25d253ad779cf933f3721d3febdce933a0a6afc3796ce9bc48dc9c394a4bccf8c4f90fbdf3b58d1167ede80ea35006e72f","ssdeep":"","tlshash":"bd41d81deb41d442c408d833a4f2106fe7113c846ad8b873a8dd873f0c822fb6b84aca","first_seen":"2025-09-26T16:19:50.861919Z","last_seen":"2026-06-13T12:09:18.737716Z","times_seen":28,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.sticky.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/jquery.sticky.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-2765\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10085,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"24823208c60bfc2a92deaa50cbdc6c29","sha1":"f2a855219e71fc4224376732b7c64e34670d855d","sha256":"bcf6b9b28cec8958f9d3f3ee39070e85ffd46d670f1f0baa7cd21aa24c188a00","sha512":"e626c4ac34f85b53894a55f0034825c513ac1e66be0263e3b98064ec3b8c68cc450bef5861322c2500f5c3332eb4c5b1c36b70bd605117a3a2995030ad53a235","ssdeep":"192:5AezbqD8ROUEO4crwoyvSZ5El3nt69a0lJ4DyalCgpsMkp1aAVNSGcsVL6mS3STU:GJDM0crw3ntiasJ4sZNS+tCP","tlshash":"5422449663b3617645abb0be479f924c32b38093a297ed147d8dca840fe697401f5bf0","first_seen":"2023-03-07T01:17:35Z","last_seen":"2026-06-13T15:38:31.465993Z","times_seen":2696,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/circle-progress.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/circle-progress.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-115d\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4187)","md5":"c96bb8beaa6eb6a1a13771fadf8169e9","sha1":"3efe06109f362caf1e6bce5cd8b7b935c18a0ad4","sha256":"d97a637cb2f9b5160b6b7000334833e9a018d33c6f1e8803cd359e9b19133c38","sha512":"ea4be167fdfd81154b9a833fe89c5b6c95536332ff8276c356c1c008bc7fdf5211114e25dec23bc9e3b4778830f315393299a6ff5ecb31a0c73827fe4efb82d9","ssdeep":"48:U5EwgSswmWlBttGHw0p1mtw1MNIqAlfgnkdBpBk5VGbTmZfFzmfBQPoMG4DeEdPP:9ml3cmkq2okbnieKmHQiR+","tlshash":"b891c99b72525c12666769b1403f1206633328ac6d1bc1bc793475ee5db4f0b21bba7c","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-06-13T09:27:21.696428Z","times_seen":2051,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jingcaiwang.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 366326\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":173,"dns":1,"connect":21,"send":0,"wait":8,"receive":2,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/fonts/icofont.woff2","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/fonts/icofont.woff2 HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/icofont.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 537868\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-8350c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":537868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 537868, version 1.0","md5":"50a4ab76e700a83e649be213f820fbbd","sha1":"28ad9e9ac82f86c50eb4dd3d713a0698473bdbb3","sha256":"242e542871bd77c8ff6375418e349ef6b3a32a208e15ca1441166641d212a6a1","sha512":"e698f438120cecf681411fa628412d1130e02637c6f76831db8d9c26ea1f4993eea86ce8d4c3477a63229f98fc23d53106158a4f6e70bcc8e61a7d154bdc4ae4","ssdeep":"12288:4Y98HRgVm/SfjXnb1lAPe0RUHw530XniGHpd2J+fCxN8GzOgqWcd1pIU4:39Y+jXb1ePeCcXisd2of6iRI7","tlshash":"c1b423e10192499e2ca4825ced35afa481e7cff938bb73616f97dfd0549972a84800df","first_seen":"2023-04-14T08:39:51Z","last_seen":"2026-06-13T14:48:04.628091Z","times_seen":6244,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/animate.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/animate.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-df07\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57095,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"cb67371414710491ee3730390d1efb33","sha1":"2e70ccc82e0ed3de2fd87409e6ca66e7b1a2d285","sha256":"59a1460df6cb458204ec993345ff4964fa7e1a77da4ab7137e50fce8434c1d6a","sha512":"71e59a86d6fd6eeb01a5bd306e2a7cd3828dcaff64629e6318d384443288c8ea261bd954ced6bb20ed27d1b81a565bb3258c5e8603522b0042e3cd17b4c472da","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvq:LIW6yQ","tlshash":"e443d96929a1104466370a15c7df9e78663ce2a31866ecffb3d2548b8f41fac23cd617","first_seen":"2023-04-05T14:14:46Z","last_seen":"2026-06-13T17:37:05.503401Z","times_seen":6478,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/style.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/style.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-d906\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55558,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2df5a4fab13e464ec953f9ab3988c969","sha1":"64e83e0cf1f11037e5b1439238c25b30dde11fb3","sha256":"c6393fae160c21258daffcd17caacd2b285f217a0602c3768715452d1923cc67","sha512":"930e6f11df82bbddae4682d9b19aa385607d632f79287c283cd6d894a85c73b2736f878d9fd2ba51c5e915bf4b910f14c90a4677b5b5b5a408b4d147aaba7614","ssdeep":"1536:QwAI9TOonxtA9306+D0R1TcaeRLkqgxLh:Jxbi","tlshash":"3a43535cea0401457233dab4abb25796eb6c50a3ee07067cb7a46250cf774ec9672ecc","first_seen":"2025-10-12T02:47:43.500451Z","last_seen":"2026-03-18T11:50:35.092678Z","times_seen":3,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/br1.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/br1.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-f54\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 83, 8-bit/color RGBA, non-interlaced","md5":"96961eaca727fd67c95e687124215600","sha1":"95e14f712cc19cad56f485a3334075184fc5d081","sha256":"1c4be1def74736a04eafd13573169c7b2cac18d3569e45c8614e9e0cc704f4d4","sha512":"b6713bf19c80fdfb5a2008d2313e8ed3a16f78b54df799e4bed180aba8ec4f6868d9cda9315e0d60239518cac466df62c821fbbc90bee2133e6268988a4eb36f","ssdeep":"","tlshash":"cf815c8ddd5a270308ccbc45b0f543029d459091cee15ee775c9ed479b18971664d6c7","first_seen":"2025-10-12T02:47:43.494856Z","last_seen":"2026-06-08T18:47:35.234882Z","times_seen":8,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897400.597536763581164\r\nx-sign: /m81AUGmYKvpyfMXxPwxKKuKoNZHKx/kJ4QapaeAWvU=\r\nContent-Length: 20\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"Name=COMMON-ENTRANCE"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2432\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=ipsamw0dhtrteipltjuzlqqh; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:15 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1ef4c0f77292e78364949d358b4d157a","sha1":"29218650be507e6dfa66db05f1318d18c6119961","sha256":"9e4edfba8ddb09f2633207e41fbd039ccc5b0495bd05a3eba5d75c8016463a0c","sha512":"33a6fa02ed5ea597694712a19ce9665c9d9a532f4c632ade617f4a6ea78dbfa17b0c9348f4204d90f90fc0a147cd2c2d7fe05baf63040c9daf67c600b0fc5011","ssdeep":"","tlshash":"fa413ba2d5a70c64064f1a5000de9c4db0ce67ffc4c9cf5afc18dd9941af989a6e70a3","first_seen":"2026-03-18T11:03:47.403449Z","last_seen":"2026-04-07T08:47:39.652521Z","times_seen":6,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=%27G-WY45Q7VQXC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=%27G-WY45Q7VQXC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\nexpires: Wed, 18 Mar 2026 11:03:09 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 18 Mar 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 84123\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229318,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4101)","md5":"3311a2ce97197bfed7e86d5f369ad60e","sha1":"8bb9b6e1de53c1c04f13a5ab0482d5a2345b61d0","sha256":"19a960994107fea1fda10330e5fe0ee078b004776ce87b38f4f5ff8740331608","sha512":"a7a291444d616a37c267a1e7614827bd989d91c94048765e87d0a297b39b9c478b923b998257037e76e357ea2acf182f2ad45d9e6fc5d904437fda02dbcbf512","ssdeep":"3072:ODKcxFDs95m0N9bjRP/E1oFwtgLG9Qjp2oFaxaXv5ZwGwEeVDsFiRzF:cjDe72FWgn8Xv5ZFwEeVDs+F","tlshash":"74243accb7da70664393a5b8503f004bb27a7992f84cc894f192d8c46e746aa5273f7d","first_seen":"2026-03-18T11:03:47.478295Z","last_seen":"2026-03-18T11:03:47.478295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":61,"dns":1,"connect":21,"send":0,"wait":42,"receive":43,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/user/islogin","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/user/islogin HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901270.6241407402274867\r\nx-sign: 1rqUFmNq1EzLtsIR27x2Hk05/bi9lgflolZP191tpEQ=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=v1leprrryv0zedtzvsnge5ie; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:13 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"406b18b5e66def3e39fc4b6607cab526","sha1":"b74bfc78357cfa452d4134609438269020e7cb69","sha256":"68f367c836c926310c1a3f44cd799b44094a9917f8e035afc47346a89e61fbf3","sha512":"aa30bbcaec1efb359801728f7805798f8b98b57039302364cfcd3afbaade61e1408f777f15213ced219c505116ad97ba0e3bd0b9ccae141d23b2d62173553702","ssdeep":"","tlshash":"32a0110020ae33a30e80000a08220a8a328c802208008b2ae22802022a0aea82a83a88","first_seen":"2026-03-18T11:03:47.47969Z","last_seen":"2026-03-18T11:03:47.47969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/themify-icons.css","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/css/themify-icons.css HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-403f\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0173da40c331967fbe2bb9358d8981ce","sha1":"817aadd99bff975aef90fc981cf91a01f98c40e0","sha256":"61994d297284a22f7ae8310855c76d7eae5f456926e47d06627252d3b90abc8f","sha512":"ffeecb123ccbf45e38e8c4dbbb35e3ce3cc81bd94a09d4a84f55052e2f9b248bab2ce5775c21993188894b5baf04a68c58c6aef0530e9ce0acf7d07ca4c1553e","ssdeep":"192:sOl5yC7huMqJ5UmejPz35E3r4F5cvOAtH:fysEDy+3HvJ","tlshash":"6172eda49d0f3caa6795e0c16b447a195b0da738de822c6fd113bd3cbbd3a11d6c42d8","first_seen":"2025-10-12T02:47:43.570101Z","last_seen":"2026-05-10T19:40:21.265012Z","times_seen":7,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/region/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/region/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897410.7092218241214955\r\nx-sign: CxiHhvSDVhAlbTKUcA5sBxYLzBGzw7q0gBY7QgbeuA0=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"Name=FOOTER-LINK"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 47\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=2um4stcjghxt3xljf0ilievj; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:17 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"143bcf839ab364aeec92e07985fd5685","sha1":"50b434c8888a5bca82a02150d720878a74c902cf","sha256":"ed7a45d7cde996f4d6dd33e8788440f3a4c17a9e1e94b9dd08290e1f37c4db90","sha512":"8a8f9e58d6f556d549455f14da96feccdc81434aac566b4f72da9f0fca61631f3c540a2c633417882d901c4c07c22f894060191a724a6a406c73c575a32d85ad","ssdeep":"","tlshash":"f5900415503754470544d11f047d354570c15040c4004fd4d11d134c4ddcf5c10534c4","first_seen":"2026-03-18T11:03:47.481416Z","last_seen":"2026-06-04T17:44:33.025258Z","times_seen":10,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":655,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/getgamebalance","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/getgamebalance HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317901270.9078908550798402\r\nx-sign: xAVhb+HdbAzU/DN6TJAkM2Dx1sIGc+WfFE0thm3DdGk=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=etvjzrahhqwxndtwssz1jtvu; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54890\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1b4ce045ca07fbfe2e06a96b2d3d0bd","sha1":"d631871c78419a43637065fc1a3189e7ab513ed6","sha256":"bff09e855e8e7bdabe473ed190c95d4a0ad849aafc895e0fd3236bef796c3d85","sha512":"bbf830ad8db5458d4a51f3e3c11563533e9143c5c5ba99ff1987e0b8e12920ce9ddb5106a37311e63b472bd84f2d0f455395329c185cee96df2775650628fb78","ssdeep":"","tlshash":"8da00203295b7ac31344d98c28e65d952055795a99408728c89c105add5ca4fb696694","first_seen":"2025-09-26T16:19:50.816064Z","last_seen":"2026-06-13T12:09:18.634635Z","times_seen":28,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/sitecurrency","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/sitecurrency HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317903820.9842249850802258\r\nx-sign: iBcl9SqCwuEah+a9cOcgFLF6Nur7zUPczXOQP2uNNEk=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 239\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=cljkcxgab3b0l0prgfsu43sc; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":239,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b5a649ebfaf2f04274f4a298b7aeb72c","sha1":"5765add0d314faf0ee82dfb866de0522a94b501e","sha256":"5029d3312566f29c8225afd4465a311cef95eca28d26d17486b24915fc5bccb1","sha512":"0f1a04c79e1b06374e264b33f45fc3721a3474c50c6260e5c7e0b9102916ce2ea2289c33a44117e78cbab95b4491c93fc0950297c3dfc1c2ce1431b0076a1bcf","ssdeep":"","tlshash":"57d0a7008da51cb3b856944d79c3140bf1a70e065da3df94087955d89d97424c401c7e","first_seen":"2026-03-18T11:03:47.305915Z","last_seen":"2026-06-04T17:44:33.116294Z","times_seen":17,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/notice-close-bg.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/notice-close-bg.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1338\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-53a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54939\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 39, 8-bit colormap, non-interlaced","md5":"c50f9378fae1eff41fe7216c7029057e","sha1":"6974183f4ca3c9027c960dd2ed5f57b5f273f9e1","sha256":"e5fd7b85e392b2c30ab51bf90b56b9f43c0248fff3c67c39a0bfc00510f1466c","sha512":"687ac8ade3493d4fdb60262e0fe6264e4a7a51bd6dd11ea2985fff85c7b0eee5fa561f9f752ada47bd11a40f632bd4d5b5686cdb9b80f0772451bcba6e5f36aa","ssdeep":"","tlshash":"f421a54bf98054c596a8e0c328ef005b5d23c8a4e5b1f09278cec85709712baa405ad7","first_seen":"2025-09-26T16:19:50.811561Z","last_seen":"2026-06-13T12:09:18.729058Z","times_seen":27,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897420.42743143952068563\r\nx-sign: xT36+ORZvjyM6XRJJvE9xdatLZ5vZA+jW0f2isSD/6Q=\r\nContent-Length: 35\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"Code=NOTIFY\u0026PageIndex=1\u0026PageSize=20"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=xrvfrsqvrbbbgemu2cux2lgr; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:9 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54870\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"47ab59d278f13701575e706edb330b29","sha1":"792620cf5789f7147b6142b44cafeb77e351386f","sha256":"14995779557ce399be34e4bf9bbc01e21ca318a0da4a215b8a75deae9c4d31a3","sha512":"a84a9e7eacf15d008fff7dc7cdd833beb983c8d152009c7b293798d516d1240f53b256e523bacda6e6a59c203872c288de1311ec38a67f12db6f1b079d0c467b","ssdeep":"","tlshash":"bba0110aa80a0c83388e800b8c033822088ca0830e080bb880aa2b888ae28282802000","first_seen":"2025-12-23T05:52:45.901187Z","last_seen":"2026-06-13T12:09:18.628273Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1018,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1018,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/config/getcurrencyrate","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/config/getcurrencyrate HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909620.29335946872779406\r\nx-sign: IGy6N+p1C8MpmAEPd+R8/bsnSwcSS0RFlkiBp+uNEJw=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 3963\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=4zspvhfrl13hyccpng45huud; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:10 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54952\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1daf033d751c5f7ca15a8aa98eb8edb5","sha1":"3ff61dbc09dc487e7e14ea2c643b236d464e3ca7","sha256":"dc198292bc573c4c6bbb69b49b7c2fce10d5fbf2d5fd958e536a4b4fa97daca9","sha512":"6b69467794abbcee647aceb8426327b438e2dc852619c8deecf7179c7f342dc5331baabb9155cbd47864b794caf6dff2408838f3e8a7a7232da18016105e1244","ssdeep":"","tlshash":"6381d98d245a18b5c9e35ccca5db6021172d73dbe4c38e774b9e1fec1260d63540ee6a","first_seen":"2025-12-23T05:43:11.644518Z","last_seen":"2026-05-11T04:30:59.380589Z","times_seen":14,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/faq-img.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/faq-img.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3b43d\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"50488a0e493aa8b146633e9dd9d9bf6b","sha1":"b983945a7d5e7e2592efa2457d1e8823805867e6","sha256":"b395b1b9c3571cbed070eefa6e0a3e658910ac2460d185841c5f6cbea252ff41","sha512":"4ae92e82c77df8d8538153e19141f4a7137d20f4f1cde1a7714d19b022d4cc82fff8424e1e7d0aabeaa9068abafc2d2433a40f73d5ddb7485cfa60d765dc371d","ssdeep":"6144:8uAoJdINGC2d2HeuTKFaIchdUMamVd7REENObAj6pkRP:8AbIYRdsDTKgIQdUMamVzEENljMwP","tlshash":"9e34238f935a72e796d0ea7613b45cd7cf9c31098b9f746caa3c4826301ccda8a55734","first_seen":"2025-10-20T03:17:34.423561Z","last_seen":"2026-05-07T01:22:12.858857Z","times_seen":4,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909620.24559513868067984\r\nx-sign: AJrz0C1GJuO4RqxRpGLutiFOgZ4lMcttf9nBq0d9Zaw=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=mjloltpkeg2t255qty35jkca; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:3 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54951\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cf78bb9a76b2a9e87f4b8e45816f7f93","sha1":"a8eb8190d25d1bde5ec064b1135305ced1c1d9e2","sha256":"809825cfb01c749c26e8e9055b02ea4dc364846fca12f667bb803b0fb4238c43","sha512":"d096618aa345fd072b03ce70702b1a316a06c3b57fcc57c648c58612b3b456d215ca9af4c81febfb4f9a811fb360bb007f25a96353ab7c2550e3f0fcbe96ab6d","ssdeep":"","tlshash":"a431ac4f922e4cf65a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.307867Z","last_seen":"2026-03-18T11:50:35.062065Z","times_seen":4,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/logo.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-1b53\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"41516f0533824fbdda91efe16a03d20d","sha1":"270a495d2fbd23a2bc2ba78e117024af800b4739","sha256":"14c40537817aa21ba287469cfadc236aa859546256b1200124fdaad22fc1bedc","sha512":"225c96d388faa52f1ad9f6ef0fede2cca2b81e563d7b5502a89688ed95fd9570da1ad7a98200ab2cf85d435829777f052da2a8322915d79bc7552e79d6672e25","ssdeep":"192:8rrxnlhP8GSgTrK0/oAZzrKdvtLzHXQhyNm:Anr8GDzooz+dpbm","tlshash":"63e1aeaa36469146e626af39dcc4304dce69821a5dc30f986346b0787d1d3662b2b1aa","first_seen":"2025-09-21T07:48:24.166978Z","last_seen":"2026-03-18T11:50:35.102056Z","times_seen":3,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/isotope.pkgd.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/isotope.pkgd.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-8a75\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35445,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-06-13T16:35:12.62637Z","times_seen":23202,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/webfonts/fa-brands-400.woff2","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 75336\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-12648\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75336, version 330.32636","md5":"cccc9d29470e879e40eb70249d9a2705","sha1":"5fe986cda635681b4b6bbd6111df2f26d7fca286","sha256":"d3caf12591d194712facd10bca14f0a924edb59c24447a3fd994a48286db8843","sha512":"396ec6b4c95e2ecfa5835b44762b588331088d0c06f79e3c0eeca93b7e907bf4695d054f933ec2d0171de11add3cf0c78aa400e9e9b7cd09792707200a5eacb0","ssdeep":"1536:gzbYxDYFYE/bpiVHSBhN2zNjlqMYmWz4F4Fus9Yht/vyMU:gOF6iHSBChgxz429Q/v2","tlshash":"8f7302e1fea7d81f67729e2b187c32e3e4e64e258f4186d2758e3e32f2254593274904","first_seen":"2023-04-06T21:19:48Z","last_seen":"2026-06-13T16:56:38.19211Z","times_seen":4719,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/json/ENG.json","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /json/ENG.json HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 119626\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:13 GMT\r\netag: \"69b25451-1d34a\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:15 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151086\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":119626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a8f3275a018b144d6a564b16b998e24","sha1":"f0ecb020d53dbd7c6462110aabd180937224f596","sha256":"1f49c7a23c55e37ada52495db253451c368a016fc99d51809318edda0547e029","sha512":"fb8b006e447cbe148048a30f0f96ba8d60cb414aafe5d625f8314c249883a93bfc314db4334db78186895e77e9b616869b30b649a5c61bcd463fc7e37b7bdc15","ssdeep":"1536:IUReib+wYRuYtur+pQrSnDpfw9al6jE7qA8L4iiaf72SC5l0P/3:I+eib+1tuDrGFfF4b/L4iiaf7JC5l+3","tlshash":"b6c32a4911895ffa8bc24396b5db6eb812b606b6b3d2242c8ce9f05c139c3c5f277359","first_seen":"2025-11-23T08:36:53.414363Z","last_seen":"2026-06-13T12:09:18.598573Z","times_seen":15,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/about.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/about.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-664b9\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"f7459fce3710c7291057e2f3ccfae923","sha1":"d65b53d739d6f41ccdeed27aa30ae2a118697131","sha256":"91203d9ce32a59c1a7014aa5e06cfaccf1167b5f4273fc900d241926be3be3a7","sha512":"0eb9348951840eed865c647deee9392a6dcdf0e9a27bad46a4e44b39fe31127090725df38257681066c8b9dd7c13f9f78fc592d6a08e448f47ee398d660467d6","ssdeep":"12288:NwGhHTjgUonUEOYKXXvAUUCf3rLkSMSdCBhKalFcst:lhHTMpnUEOYgoUUy3BCBMaj","tlshash":"8f9423f28baf06b15db39509d3a021e23961438ccff53b7aca4c7da864ec1d07a17655","first_seen":"2026-03-18T11:03:47.488423Z","last_seen":"2026-05-11T04:30:59.167629Z","times_seen":4,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/info/maintain","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/info/maintain HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897380.26007021150589305\r\nx-sign: aO+SjCL5tpBL4psixZgqgy8WBmW2Tg41VKCiC3hhgc4=\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1641\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=u2zj2hbwulwwjlc1liicdv3g; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:16 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1641,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a8e8faf994855d897162846c51d4c90","sha1":"60fef599c7f7c6fe6eb891f3969cc0a5d599cce1","sha256":"f5b8209d7d2231b305a14b8472ac6fc8858457d76b010731e52514a044b6b870","sha512":"64d3c1e6cc2ee790218b995fd7860020b4b292358b5a8be9292f527d26ec98ea9b6493b34ef91ced51df702c52a4a6f75a57102beb01a18da508cf55754e97df","ssdeep":"","tlshash":"c231ac4f922e4cf69a04685a10df0b98fedd39c371ea5ed0538add11de5d0c8c027e26","first_seen":"2026-03-18T11:03:47.350366Z","last_seen":"2026-03-18T11:50:35.08577Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/26.f6e287740e4ea85419e7.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/26.f6e287740e4ea85419e7.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-ab44\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:18 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43812), with no line terminators","md5":"8509081d1f15763bfa64c030256b28e0","sha1":"67fc60f366eaace7b9b1367938403772e0521060","sha256":"9bc47472a18fa13dc585be8a485da9f9a3c8b032e66e92012daab999f0a5c2aa","sha512":"a01fd031e9043ef769caaced1a7afcca9e41ff698823ebd1e2dc5b1fc1158e0f107ac5cba9a2c68885dcc4d8e80f459172c57e591b235d8cb528246253405525","ssdeep":"384:4QnJSWtxrxbuf07JMo+yTXLjzJa5GytPImE2WMtlfK4UFEzw/FlJcXOzSez7bdpW:4YtpHjSiNEkRj2D1111911V","tlshash":"a91385aea04355784d234e6617fb977cb2b51bf3442509a2b73fdc824bc8938178e26d","first_seen":"2026-03-18T11:03:47.379821Z","last_seen":"2026-03-18T11:50:35.129275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/css/app.4d02f46248b2f35405f96dd8e3f13017.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-1b45d7\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:15 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54795\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1787351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3b2f55969ba4288ad5cbd606cfab82b9","sha1":"0d8982a4e4ce1801c5fa50e21eb227e5d4b6a7b2","sha256":"e6a8af1cafbee2e8961ca5b82fdc776c232c04a752f5f64d5aae2a40ff8d551e","sha512":"750b12ec683a05cef1b761eb33283dbb90b6aea7d5b1b192e32fde55c7f5821d3527f7ced926ab50a434fce009cfc4ab6070c011587f78a406810087a0749d71","ssdeep":"6144:iPJVDq94f7epDEB+0ifFRsfDOwCbnsQ/OLiM4iM1/1B6N9HJ1q1lybtUhjrDOZOq:iPJVDq4c/gnMuTsJeWu7nRlTUATj","tlshash":"5e25d664b65b255a323bcea937c46ba40e18f233da2126f7f523791ccbe31461126f17","first_seen":"2026-03-18T11:03:47.281015Z","last_seen":"2026-03-18T11:50:35.158718Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909830.17720116068195324\r\nx-sign: H0tfDKbFarU9aXwPRTo/lByviENqobvoQQak373t89s=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=moqbr5ilftmth4eokhet2apt; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:19 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54959\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-06-13T12:09:18.591338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/USDT.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/USDT.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 872\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-368\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:17 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54946\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c8349c60d1507e47c5bca41cf20953fa","sha1":"302926a484ad20087631c3e7a32f78a2ae6a87c5","sha256":"0b2dbe534eaae9acd4c86caef563613006798d5357b6e3066754b3860445ddac","sha512":"237b859c0163cb892978bf6f901902b568bbe5ea3c1a26c3ac42a36dd34744e9b7f5fa523d2be763b2e5b875fb711eeb0212c620cda65b95a25148235dbe425d","ssdeep":"","tlshash":"851156f11761f7d6d279783815547a58dd9ca6b30135f98f2f46864031a89988149813","first_seen":"2025-09-26T16:19:50.824066Z","last_seen":"2026-06-13T12:09:18.63662Z","times_seen":28,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/js/manifest.f1d323b5ea7fb2a5284f.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/js/manifest.f1d323b5ea7fb2a5284f.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-c63\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:6 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168505\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3171), with no line terminators","md5":"d3b88065b9b1c2f63cd335d38ba346e3","sha1":"d6391b1bbc52f45e45c88263f5fd354c41a51f52","sha256":"166c559da6d0d2f304389ce10e16f723a6624da53db03189b4351ef0c59f12cf","sha512":"e31239d621ce9b5c043c0a79a3ac7c09e54b668af07ca1309e26ef715a326ecaf7f599ef864aa2cd4f940e05f75c8f95235fb26ad7cbf57667982b9469f397ba","ssdeep":"","tlshash":"7b5109ee37b9f1d457721a85113bc834f23d39202d48dcca83a8e2af6d35ee451a1976","first_seen":"2026-03-18T11:03:47.316987Z","last_seen":"2026-03-18T11:50:35.148959Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/pricing-top.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/pricing-top.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-35d3\"\r\nexpires: Fri, 17 Apr 2026 11:03:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13779,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 252x142, components 3","md5":"ddbeeded67a9bc99276d68b50f548ea0","sha1":"8263c13e2bfcef8133aa837d937c07230d5daee3","sha256":"db0ea07b72280d3440e2cc8f169c39aa40fe274e7527ce33f7d73e142a2c3967","sha512":"d4bf119365881a8a6fb5877791baca315b10760f4cc855f813970ac815e388fc2e96d720d5667008e855413759f840750c8f87868b6c9bd70c1a61cc29ee4568","ssdeep":"384:NlKbmvrAH7UDTs2Qkvx/kXML9LM/z1hEl:Nl5TvPsI/kXILM/jEl","tlshash":"2952bf6ce217bbc5b53008a9067c8f9d83d1b764a1eae01db4d9cee0f59b65804db2b4","first_seen":"2025-10-06T03:41:29.063463Z","last_seen":"2026-05-16T10:35:01.199248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/tab3.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/tab3.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-ad6b\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44395,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x281, components 3","md5":"bb86f95e573e660722f7385cc06d1855","sha1":"18194c01347f6734daf57169e04cfc5a46def804","sha256":"5c9f35e1cb9a5fc5abd74cac8fca9a564e97c1205d6d130e7e602faa85a8250f","sha512":"ba3b490a62577c3d574eea124a9ddd4a7f8589e8fa4fbaf36846ea8a67250d8d2510d501f672ede1f046a131673ecd16e0b3e40ed01e56e3deac547a93605c27","ssdeep":"768:y1Ptwd2aB2i8GThSMlQwKLsdNvf+M5S5t3FMwMd6SzvQBrErSMGDrYF9NCA0Ld/R:+twgaB2ijThSBwdlmMY5tVJMd6NBrEu/","tlshash":"d3130280b72617eee2320cb5145775fd04c23e837681aa8f89cacd64d740d5c7a67eae","first_seen":"2026-03-18T11:03:47.492407Z","last_seen":"2026-03-18T11:50:35.141622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/team-5.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/team-5.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-cd4e\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52558,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 500x500, components 3","md5":"d591a40a59ff234e854920ac2a7b8cc0","sha1":"2d2d826283449ff83bf32921624b7a0a09b24a9b","sha256":"b194dc53f3fccb51d25c975320b05c5d58e6fb73f44e20adda225fe1583fd97c","sha512":"ee3a5f47c00c74ec364f48e6e0418c523a0215554ecf806124d5745fe39a42cff424a3b6719f48391c64ed8fd891cbeb62637db14f4638c4a1037e24c8b9a6b1","ssdeep":"1536:f1DBArMNzBtxlyII9K8+xA683FohBKKcWdK8L5af8mfLdW:f1BArMNDxAL9f+x4SBKwdfaTfLU","tlshash":"dc330211aeece675f76985b338027f0552d48d5817c321fae8a41bb7e9e0c563ad80e2","first_seen":"2025-11-02T06:09:56.248576Z","last_seen":"2026-03-18T11:50:35.142257Z","times_seen":3,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/page/info","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/page/info HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897380.29547709844909376\r\nx-sign: VtjMcNgkI7LcM92Sxt2amr5viPaaL2uQJpULxMehjOs=\r\nContent-Length: 16\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16,"data":"Name=HEADER-MENU"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 1461\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=tpbyyvgytlbojgolhjnxq2e4; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:17 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1461,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1379c36feeef04b155b9ba76696ec48a","sha1":"67ab43599d45573454662c717aa7542738dc0a85","sha256":"b89f6b24d9d9718ed24256f4a6e8174796261b54c3651cf68cbd408bbf9947e9","sha512":"cb14bb6f0324151f6d203df0d46e19ed48ff911e213bceb2979f43e6ddd4ea99dde449c006ca56fb0e0ad37e47f784af5bdb0c0d462bcccdcc0fe04510e897ab","ssdeep":"","tlshash":"af31086291671ca9061f1a9000de584da0de63ef84c8cf5aec1cde5d51afa8996a6093","first_seen":"2026-03-18T11:03:47.402646Z","last_seen":"2026-04-07T08:47:39.596323Z","times_seen":6,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/region/get","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/region/get HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897420.004682908718240064\r\nx-sign: OHz8q9+UDrkcfOtOnkHvf4HpRI+I8ewaXbsjhA42WXU=\r\nContent-Length: 20\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"Name=FOOTER-SUPPLIER"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 47\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=a2axovnvk24hl1fumziglrka; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:14 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"143bcf839ab364aeec92e07985fd5685","sha1":"50b434c8888a5bca82a02150d720878a74c902cf","sha256":"ed7a45d7cde996f4d6dd33e8788440f3a4c17a9e1e94b9dd08290e1f37c4db90","sha512":"8a8f9e58d6f556d549455f14da96feccdc81434aac566b4f72da9f0fca61631f3c540a2c633417882d901c4c07c22f894060191a724a6a406c73c575a32d85ad","ssdeep":"","tlshash":"f5900415503754470544d11f047d354570c15040c4004fd4d11d134c4ddcf5c10534c4","first_seen":"2026-03-18T11:03:47.481416Z","last_seen":"2026-06-04T17:44:33.025258Z","times_seen":10,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/game/recommend/news","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/game/recommend/news HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909870.6811091834966846\r\nx-sign: k6MwSgZ6dvfn/rtqMQMzk3o6DqUwYNn/Sg2hKboH8V4=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 85\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=zsayawhm0ah0rhlu5uasgo5c; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04tN3228:13 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04tN3228HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54961\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1710f8a80d60dffd262da966b1557d7e","sha1":"14386ec708c979d426d41a853c857ed9418af40a","sha256":"a0bb1e27c046b9946b6cf5d3da89bfeea35a38c269451e4501f0caf0d689d4b3","sha512":"44ef9c832286a0520ec1e0ef9e53250c47e420990b36035db1d3de756928b8bac28a6449cfca5295e6769fef02e51021b50b5ec2626a01c8921694132b7cf59f","ssdeep":"","tlshash":"f0a022082c0b0c83388ec00b8c033c3308cca0830e080fbcc0ae2b8ccaf283cac02002","first_seen":"2025-10-05T08:20:38.635603Z","last_seen":"2026-06-13T12:09:18.591338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":224,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/common/no-data.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/common/no-data.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2439\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-987\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:3 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54853\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"827ec62e3a6f9abd6525732719f03452","sha1":"c1af9a21c2941f494ecb40904c2da5199840631b","sha256":"1176b96a531fc5d9ab6262d3f2652256edf7fa73faf06cedf061be199e6b66a7","sha512":"c5a22fcaf8fe57f98be44eae9bb2e46dc1e81b6cb64d5fe6e07fc6e28af09324270e203f8cb3514bca9bb3188afd29fbd7a23aa4821a7f329f6ab32db02200a3","ssdeep":"","tlshash":"b04108ed0090921a6dd6203a7ef526c00838ca6898b56ae27a7bad281147d5e0e84727","first_seen":"2025-09-26T16:19:50.864639Z","last_seen":"2026-06-13T12:09:18.676027Z","times_seen":26,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/content/news/list","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/content/news/list HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831789\r\nx-nonce: 17738317897430.2825373454742469\r\nx-sign: ThgawA1o21TFt4sjIMqe22GQaJ0rFJhpM/iEfPkfFRA=\r\nContent-Length: 23\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"PageIndex=1\u0026PageSize=50"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 7542\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=wqo041hljbxbimdqx33g0stu; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04a92226:1 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04a92226HKG(origin)\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54874\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7542,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5ccc3185d3f4c4296353cbd011299d54","sha1":"fd923ef5f26f501875188311744cf0e1a2fe8b56","sha256":"f02ba289108992969329b9a19a2d1701a203877261b30015e0b860b4b265c399","sha512":"1f22dd39730529a88021201ccec6880ea67e51e106f4d705fc3cf38fd0f3e9690b4590d96fe0cf0d5200782d583eb1a9d9bbf702b2ade9971cc05c3ea554cb11","ssdeep":"96:rXtHcDo5umhqCGNQXwa0uMjnyp1ABo6b8Tt3N3Wv:bt8MfwcwpjnC1yzQTv3Wv","tlshash":"1df1fdd6eaf91f9a1dab1d80ec3af15df10a71581e0a89678c3b05fbc744378e52a341","first_seen":"2026-03-18T11:03:47.324563Z","last_seen":"2026-03-18T11:49:34.329361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/countdown.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/countdown.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-31a5\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4136)","md5":"85b1a21e4729b6b7c54897fe46ea21dd","sha1":"f49ba91732898eaf03b0f0deb8e5d8199840038b","sha256":"d0c85a0dc398ec22c48be7a4533441d142b6e2168370ec5f3b0d0e13f0cddedb","sha512":"b5d75bef733f2a9662bcd3e57660fa5cbc9d0b51d48ce388590917b2db91c56eaf7cf80af59d2f6159b1969e0ca8bc6b316b26b81984adee92863945dae4f1d3","ssdeep":"384:HFUpxGhqtJxMxHxqxAxixw3xexIxrxAxWKQJK4MN12CfigRnkKltru:lUpQhqtQResGM6ENsWKQXMNPfiAlM","tlshash":"cc42b5ce733212652e7552aa54ae11073175c635b445481cb6fcfac8b9f8cab60bfb38","first_seen":"2025-10-12T02:47:43.50802Z","last_seen":"2026-05-09T01:16:58.897354Z","times_seen":4,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/language/png/ENG.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/language/png/ENG.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1612\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-64c\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04StD63:2 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54861\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"58855556336c0d7983a4056842b34cf4","sha1":"188371a2710287fd627ceb303dcbd47fdc5f252f","sha256":"401143a1d7ff508cfd97e256cf7595e241ea3b51ab8b9100be9b34f10b949a89","sha512":"711d758a0d5d8d4655f114f481dd3b0b249b8d6853a5ca524ee7b35bf794a9c4e364073a133fffcffa326c05d3ed702087fd4594b9a214e57e960b20f8571e78","ssdeep":"","tlshash":"59310a93d8854e50d67c5239c0ff75933a6077291ad2d54d0b05431c3a36c8b9152da6","first_seen":"2025-09-26T16:19:50.833854Z","last_seen":"2026-06-13T12:09:18.699479Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/br5.png","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/br5.png HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-1055\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 83, 8-bit/color RGBA, non-interlaced","md5":"7827074b2b0855f2273d3de5aefd7652","sha1":"9da04dec8957cd62fd5886e7225c29a17ba92acf","sha256":"2251156ff5648ab35d35fa2154b17ebe24430e9e8123428538bb5afba3bc2df2","sha512":"cdfce709eeb425f880c4e8eaaa070690ece06c9f1d07edd18a98365741bb2aedf92eec6ad43f44012df1a302ef4347acf8d0f5a32c505b24e6c8f550ce5339dd","ssdeep":"96:6SebSd4y/JLS9GR2J/DmjL1iUnkbMhweR1zSVHJTvt3V0vmaI:5Fd9EG2tmjL1VnvnhgxFr1","tlshash":"d9814caadd01794375d8dc4a2af306123da3bcd8cd20ec97ab9de39338383a040675e5","first_seen":"2025-10-12T02:47:43.521839Z","last_seen":"2026-06-08T18:47:35.216365Z","times_seen":8,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/wow.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/wow.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-20df\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-13T18:18:43.4966Z","times_seen":12891,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jingcaiwang.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 366326\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":67,"dns":1,"connect":25,"send":0,"wait":10,"receive":3,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/team-8.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/team-8.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-f411\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x500, components 3","md5":"1a86359d90b6b890b2ebf5344d9a9f1c","sha1":"00fd2b9c1f3ba4354edbeff9cd3648b5b6e97d56","sha256":"2fdb56b5bcea2e117444dca0c913d05111d75dfa86099e3b2ea5695d58b1ef8e","sha512":"f8b22f8c951d30a92244d039c04d89b208df9e19ba7731e045f6433a33638d561e5a6455caa41f0eb58aee8e2fbfdc1181a6b1714017589090f5f86296d8f3b8","ssdeep":"1536:xWpTMDgJPCmEIl0as1yQHBtOEd8Uz983Hl4GANmUSFJT:0pI0JZEIlRsfHBDjz+DqmDT","tlshash":"fd5302b6778dc7b1290a8afd09ec0cc86ed2f349b254b13d01ccf2aa15e0c9365e5d06","first_seen":"2026-03-18T11:03:47.499243Z","last_seen":"2026-03-18T11:50:35.075366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/jquery.scrollUp.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/jquery.scrollUp.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-7f3\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1872)","md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-13T18:18:13.232941Z","times_seen":3229,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/js/slick.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/js/slick.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-cfbc\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53179)","md5":"16a791ccc8e9d34fc76accfadfdd5e4f","sha1":"3f9098a372936df720e4ffef3493c328b48983ef","sha256":"4f183d6af3e88171a4bbae9a2e77f90f55b425b013d057b80eade59f96ae5d0d","sha512":"5e5a480df3b102519b2606f21283f4117a399aa95c613e54c4d4bedb3c2ffe0929179bbeb1383642f8c893b7ed6cad1a522ea09e3f43e9a9322753c02006dd33","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7v:6F97uPKFI/rhJ+vQgF","tlshash":"82338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-06-13T11:56:26.342129Z","times_seen":3690,"resource_available":true,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/images/tab2.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/images/tab2.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-a798\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42904,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x281, components 3","md5":"bf4ba9a2314f424d241701132fc63623","sha1":"a135c04c41b30e9e6c16197e75a71329473f1e18","sha256":"06454d91e430cc0b9647a27b270f9b21d4468957c493620ce2bb53ec6938a99e","sha512":"a3864414078a47229f49281bb36f3d8f75a5ce043d3f853cc9b3fb4207ebdbbd081840dc31a85050459ad867ea8225ea0f8ec6c82bb1ba22f5317bc5ce4f6fb9","ssdeep":"768:Yp4yT08067QMg5f4W+8SeNO9IjIG7Yw3VJmmHyEgw4wwnC+zCKdtpeBQze8eAcu:Yij801MBSaI5blJIC+zC2bDzevnu","tlshash":"9013f11253768ac13c3128b82b6f6d5f6a9547e57e028096c2d75e2d71cb32b8b9cd3c","first_seen":"2026-03-18T11:03:47.501247Z","last_seen":"2026-03-18T11:50:35.053565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/images/20260317022035377659.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/images/20260317022035377659.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 18:20:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b849f3-ff6c\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 715x500, components 3","md5":"4f6a68a69c6c8091c9629b8e5e421585","sha1":"4ea2816ee8aa429ec6b3b11cd20f9dd87fa79f6a","sha256":"7c6c1d8e8205cc1f107335de4e9575002f20a78c514c63d9fd0cdfe381fac1b0","sha512":"63ef5bab68ac416615a8ca6bb68bc084c01af557e335296839517170d163cdc72e171b4c32b72bdf2d93aee25c54d529907f2abafa6a402f60667540c2cb60b7","ssdeep":"1536:ZYskVKRclzicTcXACRPO/mo6MZ4F/agQhXuWMg:Gsk5lfw1PEJ6ZFCLXuWMg","tlshash":"415302e506e997e0506a7467eb9e9cf33ea4ef21b404195d7cc3b270b26e9ede001607","first_seen":"2026-03-18T11:03:47.502099Z","last_seen":"2026-03-18T11:50:35.094653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadjs/tag.js","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadjs/tag.js HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: application/javascript\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-16b2\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04Snp230:5 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 168498\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5810,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"82bf7c6da65af90fbe37e26c5ef25a58","sha1":"866520238607474cfa7cb79775ab961720221a7c","sha256":"7098d573321c71fec0d44ebb7a1378596820e3a86d95fd20077fcda2a75da5e5","sha512":"4f422abc5b8a136fc805e9a5fa2b1ca3c4325b5e4ec8dca1f35621008d82337dbc28e20da5d235139013f7f861e6722b4e47e33bde8b021b1bb5708bf2466b56","ssdeep":"96:ZL9wIfDBXfAWbasRhlj0luz6ao57H4AQYJLtyw6HywgumPZVZ0jqlhxFLpNfeQuz:gaI6LRh90luz6ZVHNQYJLt7b7umPZVZo","tlshash":"e1c1a6e90e67a82166f7606b4f3fb118302700279485d4057ecdda442f94b994a7efdf","first_seen":"2026-03-18T11:03:47.372953Z","last_seen":"2026-03-18T11:50:35.056085Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-jingcaiwang.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Mar 2026 05:17:40 GMT\r\nexpires: Sun, 14 Mar 2027 05:17:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 366326\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":103,"dns":2,"connect":8,"send":0,"wait":8,"receive":5,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/images/20260317022034791491.jpg","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/images/20260317022034791491.jpg HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 18:20:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b849f3-1d188\"\r\nexpires: Fri, 17 Apr 2026 11:03:05 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1037x579, components 3","md5":"9c7515f49f70e3dc901ff3ea00adaeaa","sha1":"6daf87edc95f93798332f181130932c52c86d557","sha256":"055fa4e08a0af15471d616445a53cb931805c1fa52d0ecc517e196e81c99e8e8","sha512":"ff72bcf635457f83b8eaaa4ce580c12608a28c710cc51c1aeedc19fe79a8e8fb80c152eac14b5cdc759114fa26d6ac0221cce68b2a080e7dff368e78557eece5","ssdeep":"3072:IfSmOih4HRa/WqhpLwvEpmp76DG7hVRpOeBEae:08iqxa/WqjwvJ59nrOqre","tlshash":"fac3121e1c9031d6960dfed7c8accde8bc7267596314277889a87c0278e65f922a05eb","first_seen":"2026-03-18T11:03:47.503331Z","last_seen":"2026-04-26T11:34:02.806732Z","times_seen":3,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/currency/PHP.png","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/currency/PHP.png HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1482\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-5ca\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-HKG-04yjD60:4 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"eaf5ff08b5048109e89999f60ca3fa35","sha1":"4320a3e4921d6b4eefd04d89e8fed926cbe98d06","sha256":"4f222b1fa0276fae692c3c7a9a87eec0c605df00b7dfa4c4e9c2369db6ff709a","sha512":"530e4f669a58c96560016ff8db7560fc919cc8a2b3083ba677a0651c6e2dd32b0a746e243a682bf09bc30e5b3b528e11547baafdd02afca175ed9d75c655d0b9","ssdeep":"","tlshash":"3731c77121f9d163a9f2e40ccd20f9b03680aa1f7597099c71ea94682b5208a4a8861e","first_seen":"2025-09-26T16:19:50.871897Z","last_seen":"2026-06-13T12:09:18.690566Z","times_seen":26,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/loadcss/skeleton-load.css","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:08.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/loadcss/skeleton-load.css HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:08 GMT\r\ncontent-type: text/css\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-2bb8\"\r\naccept-ranges: bytes\r\nvia: 1.1 PS-000-04tN3228:13 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\ncontent-encoding: gzip\r\nage: 151087\r\nx-ws-request-id: 69ba866c_VM-ARN-01Kmy5_9194-54790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11192,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a34e859eb54d8feba317ed219716e79a","sha1":"ed1edcce5f151af73e192c807f708810b5d5a6c3","sha256":"6413b270f0787f3b97c8046de8cdcd2549fcc3c07f5ac33fb46ae14e56b167dc","sha512":"db7baab74d328764e6ba556fd11e130726e00617b79a38cf33ff841073ef551f8e3c9e07d8fd8dedde9d7dbd934ddb292aec82db59602775282eaf545fc4bf68","ssdeep":"192:MW4xFiA97UgmJq6cFPhE32p343GA8iwAZ+143z34uS8hQ:zA97UgmJq/hE3M343NwM+143z3fS8G","tlshash":"be32d8b40bd518cde061a093f91a99c06f8c4437dd5af98ba5e73fecbf8a6c014a2475","first_seen":"2026-03-18T11:03:47.369397Z","last_seen":"2026-06-01T00:45:56.708083Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/venobox/venobox.min.js","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:05.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/venobox/venobox.min.js HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b7ac0c-3b35\"\r\nexpires: Wed, 18 Mar 2026 23:03:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14868)","md5":"f2409c31cfb63e28b8d0213c1ad2bd20","sha1":"a2b9949ff930a1a01a93595d949ce13cca428951","sha256":"49bcf8033d9c986403ad766fd393ea50e9298cafe34c5050302276e46b0db58d","sha512":"cc14e75fdee4dbaf627b053044e896c0ef3603ab973b895c8ead19e319ef3bea806e50bf44c41152ef1f4152ad48584f34a0f95f387d3cca191bbf8b9e61f51e","ssdeep":"192:l96Ri+jXrhIqJ1bYAB20R9P/IkgeV2OSymwuPPm3UCteUSu9syLazNxRwhrrmDw5:l+3hwAB20j/Ikgg11mwQim1qr9UZcN","tlshash":"5262b7b57615b49e22579ce8253f674f3223a67fdd03076361f4d3e00fdac8aa892909","first_seen":"2023-03-07T12:10:10Z","last_seen":"2026-06-09T11:43:55.036365Z","times_seen":85,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/fonts/Flaticon.woff2","fqdn":"zoom-jingcaiwang.com","domain":"zoom-jingcaiwang.com","tld":"com"},"ip":{"addr":"154.85.148.145","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-jingcaiwang.com/","date":"2026-03-18T11:03:06.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m.zoom-jingcaiwang.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Mon, 16 Mar 2026 06:00:00 GMT","end":"Sun, 14 Jun 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E6:3F:55:EB:D8:2F:E8:7C:68:7C:D3:AA:80:57:3C:D2:6C:C0:F6:63","sha256":"42:06:B0:AA:89:49:8B:B4:F0:67:30:CD:85:24:BE:28:4A:21:F3:65:A1:67:57:B4:98:AE:2B:D4:0E:92:A9:22"}}},"request":{"raw":"GET /themes/zoom_jingcaiwang_com/skin/assets/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: zoom-jingcaiwang.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-jingcaiwang.com/themes/zoom_jingcaiwang_com/skin/assets/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 18 Mar 2026 11:03:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 54184\r\nlast-modified: Mon, 16 Mar 2026 07:06:52 GMT\r\netag: \"69b7ac0c-d3a8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54184,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54184, version 1.0","md5":"0e9e1c4715bfb5a2925b6911e6402bd9","sha1":"f1971a26f24e0c8ebf2709226d8c6fb7c1fc854a","sha256":"87ea43b06cc913e8699d7d4a3b9c320f5a91ec546bc249ee970b0357364dfb26","sha512":"118feb25ee112b01bc19fabb67af11491bd457ab562ccd7358f361826cf6e51986e05354604c8aac4f1ba1877381b6cd635ea00f0b77064f4e0ffec7fcf40a24","ssdeep":"1536:9cSlT3WdyWboybWyB7Kdwney2+wl4VY5qYo:9cSlSdyJu7Kdw12+8wF","tlshash":"923302967f167778246da8b3d44748476e2e9fa8e5c1be17fc239d01389233d21c8b1a","first_seen":"2023-07-20T09:45:47Z","last_seen":"2026-06-13T11:40:23.113274Z","times_seen":856,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/static/fonts/iconfont.woff2?v=7b0da76","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:09.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"GET /static/fonts/iconfont.woff2?v=7b0da76 HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/static/css/app.4d02f46248b2f35405f96dd8e3f13017.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25252\r\nserver: PWS/8.3.1.0.8\r\nlast-modified: Thu, 12 Mar 2026 05:51:12 GMT\r\netag: \"69b25450-62a4\"\r\naccept-ranges: bytes\r\nvia: 1.1 PShlamstdAMS1hm28:4 (W), 0.0 VM-ARN-01Kmy5:0 (W)\r\nx-px: ht VM-ARN-01Kmy5ARN\r\nage: 151085\r\nx-ws-request-id: 69ba866d_VM-ARN-01Kmy5_9194-54877\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25252,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25252, version 1.0","md5":"7b0da76169563722462c442df4536dd1","sha1":"e4ee7962bc2ece7e100302f2dbd406d097fcc6c7","sha256":"f7a076ab6b5fec58421a7821ea0dfc1ee536a85b4796052aaef04121af8ca207","sha512":"83f7c8833c1f53b651f2f24e4863c3b227f3620dd89a2c590ad9b40d1c65a38ad84f9e283135ff9bc788f1a3f93fa339d5f2bab09905dd6401fc244cb4f0c258","ssdeep":"768:lNwsz9q2x85QaxLDVWlNA54b2Q7v7zUUt5:PwKPx85QaxLDVWlc62Q7v7zt5","tlshash":"49b2e12651a7fa7965e085bfde0e05cae421ab33dd0b304605be4a360e13df989cd4a9","first_seen":"2026-03-18T11:03:47.347606Z","last_seen":"2026-03-18T11:50:35.094002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9d1.pro/request/site/info/getlabel","fqdn":"9d1.pro","domain":"9d1.pro","tld":"pro"},"ip":{"addr":"163.171.134.56","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://9d1.pro/#/","date":"2026-03-18T11:03:10.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9d1.pro","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 01:58:04 GMT","end":"Tue, 28 Apr 2026 01:58:03 GMT"},"fingerprint":{"sha1":"26:23:6A:27:FE:C1:52:38:62:1D:16:91:42:74:04:40:EA:A4:5E:49","sha256":"E5:C7:B2:DD:9F:41:95:B5:DB:C9:8C:2E:24:04:EB:4E:1E:D9:FB:31:DF:71:B1:79:29:C4:B0:85:B1:72:C4:A5"}}},"request":{"raw":"POST /request/site/info/getlabel HTTP/1.1\r\nHost: 9d1.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json;charset=UTF-8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nGHOST: \r\nHTTP_X-Forwarded-HostX: 9d1.pro\r\nUSERINFO: \r\nContent-Language: ENG\r\nX-Forwarded-Isagent: false\r\nx-keyid: k1\r\nx-ts: 1773831790\r\nx-nonce: 17738317909620.22909770150302522\r\nx-sign: RQMfdk0dJcEKDZPuaz/p9UYf70SDhDpsLGNT9jAJNvs=\r\nContent-Length: 12\r\nOrigin: https://9d1.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://9d1.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"Currency=CNY"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 11:03:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 15524\r\nserver: PWS/8.3.1.0.8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=qzbzqguigdtkgpq03snk4rii; path=/; HttpOnly; SameSite=Lax\r\nx-powered-by: node.js\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, x-request, Content-Type, Accept, Authorization\r\naccess-control-allow-credentials: true\r\nx-ua-compatible: chrome=1\r\nx-aspnet-version: 4.0.30319, null\r\nx-forwarded-for: \r\nvia: 1.1 PS-000-04Snp230:7 (W), 1.1 VM-ARN-01Kmy5:0 (W)\r\nx-px: ms VM-ARN-01Kmy5ARN, ms PS-000-04Snp230HKG(origin)\r\nx-ws-request-id: 69ba866e_VM-ARN-01Kmy5_9194-54955\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319, null","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":15524,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"21c23accc7bf2ca3b5f0862981d6e598","sha1":"c09b8eea2decb742d5f8dea35fc66a4c713fd737","sha256":"2b17e553c5ff4c419efcd9829040fba49f9dd4870dc224900a823692411ca9cf","sha512":"bd9431c1f7028ec95a40acf53663de4197762bc987454ae787049575183c3312866d4215aedc957a60b98708ac6f2167b92bfea5cf58959bcf09deeec0c48c23","ssdeep":"96:fLfcAmSmrQqHHFINXutQgeTgLmi5u7eQDjjNuQCe0q/Va4RSUmXu8+4VFabd1dE+:D0YuagKiWHCkixyWw3d9lZi6c2Q+m4","tlshash":"8b62a36b03db6c8f0b665ac038cfa80ce44d119fc5c6df9da12d9e1da6bf1a650ea441","first_seen":"2026-03-18T11:03:47.279779Z","last_seen":"2026-05-06T01:07:03.423019Z","times_seen":8,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}