{"report_id":"185bf411-e809-4247-9fa4-dbda04319506","version":0,"status":"done","tags":[],"date":"2026-09-14T03:04:23Z","url":{"schema":"http","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.86","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"title":"91porn,91pron,91porna,91视频,成人视频,色情视频,好色tv,國產av,a片,52av,91porny,黄色网站","dom":{"size":421307,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12850)","md5":"ef530d027d7e75607ffc116b0211f0d0","sha1":"dba0b5d28a6214ad1c629e857e3c6798aeb815fa","sha256":"5dc091f2ea2269d926a6fa17b8a185548ba0f39276ac2c79f634b16b777a8254","sha512":"84646750faabce1900f1f6bd280eea6c05945289bc8885ac73ff3ed298878827ae1d6a78730e6c45586e4c9d6d1cfb780a3866b5cf95ed453ef156c13f2d2b2e","ssdeep":"12288:tT/Q76rt0LO2mqZMS4oof6S0DCjcAnTjHK:A","tlshash":"ea9493d402f04627018f95923f70bb6a6b91b657e08a644bb2fc3b954fc9c9b8e574cc","dom_hash":"domhash2d27ecf8bd0ec83627cce325ba82469e","first_seen":"2026-09-14T03:04:37.949564Z","last_seen":"2026-09-14T03:04:37.949564Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.86","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T03:04:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"api-dc2-prod-08.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"beat.diyzxcw.cc","ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":44,"received_data":1518012,"sent_data":22936,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"56.10.62.34","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":504,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"54.169.246.224","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":504,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"54.254.116.18","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":504,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"analytics.ahrefs.com","ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-11-25","domain_rank":48245,"first_seen":"2020-05-06T23:41:55Z","last_seen":"2026-09-10T07:48:55.148676Z","alert_count":0,"request_count":2,"received_data":7991,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"47.128.151.158","ip":{"addr":"47.128.151.158","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":915,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pic.zdmhyg.cn","ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"domain_registered":"2025-12-31","domain_rank":0,"first_seen":"2026-09-09T02:54:36.005059Z","last_seen":"2026-09-09T02:54:36.005059Z","alert_count":33,"request_count":33,"received_data":4879629,"sent_data":18033,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"54.255.198.114","ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":5,"received_data":2124,"sent_data":2456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"52.77.210.85","ip":{"addr":"52.77.210.85","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":504,"sent_data":1047,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"47.128.222.54","ip":{"addr":"47.128.222.54","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":504,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":772,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":1,"received_data":531032,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-dc2-prod-08.cyou","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-05-01","domain_rank":0,"first_seen":"2026-06-04T12:56:41.269718Z","last_seen":"2026-09-11T13:40:10.198396Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":549,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"540d99baaf8e4ca4e2923f626fc4d9d0","sha1":"e54b79618d69fd14f0d979cd100207c8bd3781e2","sha256":"959acd33dbd267a596400ed4160f69192ef954cedd30914a4faf2b409492db2d","sha512":"7e1050e0c114a882c2e6e0e29e99ca74c6ab103b560a8f336598f49d907e9b1a5a95eed059a0eadf15efd38fd52714789bdf9aff03645c556a7d817b599a27c9","ssdeep":"","tlshash":"7d01dbec29d3e45f137f2a636fc936473592a8c14685984386307b4544bc685cd3eec1","size":774,"data":"","first_seen":"2026-09-14T03:04:38.106723Z","last_seen":"2026-09-14T03:04:38.106723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eee50ff00a7b269d90e15d128943198b","sha1":"d4c51c6dc8cdb07a1a17325abf0fcc4e1b98d897","sha256":"9f69272ea9b367af85db2d8fffa20bc73ac8d02374d3f395f06242469a1a8f52","sha512":"fda8daa01da2f9811a88bb646351ff3c6b512684165f6ec47754946733509060ad26228338f3adfe76f34ad855248eb77a7e250e791e431198fe41adc288c440","ssdeep":"","tlshash":"a0c02bcc210a4c7081eb27008b3ffe00f001320494d0bd310c0a23044e20e53e754c14","size":149,"data":"","first_seen":"2026-06-08T12:56:11.680913Z","last_seen":"2026-09-14T03:04:38.107852Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b564a931ebbb5ffcfcd1d3edfd92dc8a","sha1":"b30e16aeea2c05943cc8110daf2f281a593dcd3d","sha256":"665e78f28c732d8b127450d62ec0e2564c780bd67f929047defc55707d66b44f","sha512":"da0ac6fb009e1cd0f6098dd77d8b3901123e29bd5b5fbacc72b5de63281d44e08d1ac06a3706be41c6f791baf4fec6a6b673cc13eff18c98d3a825f04c73e53e","ssdeep":"","tlshash":"9690028d6464746845a331645d5b3b553439441a710381c034cd04451f311468205d58","size":56,"data":"","first_seen":"2026-06-08T12:56:11.681886Z","last_seen":"2026-09-14T03:04:38.108437Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad5b0be5da19ffc038fd1fee6d351c8f","sha1":"49513ea2063bcaa0f884b4b47ab3bb5ce76f0852","sha256":"abb30c87bcba0232eda72750c20f09f65f67dc2116fbbc322a070f88571ace2b","sha512":"ff36cd8b65cd4a5ef652b92fd7f4198c9e2aef49908d56596f890d690a5936c39f67dc643aa2b00176ec15e4cc98deeaa3feb125a9f804bfd8b1e9401cae9197","ssdeep":"","tlshash":"7760003000000003c330ccf0c000033000300c3cf00c03f03c0c000000030000030003","size":16,"data":"","first_seen":"2026-06-07T20:56:38.440611Z","last_seen":"2026-09-14T03:04:38.109056Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d728856b95b93a90c5d17fc5b490694c","sha1":"b2de9d7d09cbfe32435817f1626eb9a8148ce36b","sha256":"043e53d1cc4aaffff88e131ce5db38bf15a01fd7c2312add92d255ac29e4aca5","sha512":"e92729e86ad44139c57e3c2912a4b19a2f3c44b09015e588680f6617bd8db1e27ac67e89bb95c70aff4e4b33ac8c6b400f0d93ef60238233a7ec567a82eee2d2","ssdeep":"192:/mWmvT6MgY8mDPvJw/f4+esJ1F0qBm9uOA5ytf:/m/vT6MgFOPBw/f4+esJ1FJEwOA5ytf","tlshash":"101252e3ab3a3bf9da35696db1ec16cf0d570c20cea0448b077e599718eb85079d2874","size":9467,"data":"","first_seen":"2026-09-14T03:04:38.109646Z","last_seen":"2026-09-14T03:04:38.109646Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3acffe36215607466969ab57ea19b21","sha1":"f6425da52af0477993121f47811ca098143aa2d4","sha256":"1304d3a811135b7320e9ade21fb370c5bbcebf20f4c8f1589e9a004a78c71661","sha512":"bf607f71a217a54b415bf4c1a947f0ee6e9d9eb7882097574aa5a4413f01b50613e0ddb8aaa34fe9d9261e3011d3c1784ea240fe4eb1d2632174f9289b59f4d9","ssdeep":"","tlshash":"db61d6d5737a0ef8daba10ace4ed2a6e41f962816c9468a70630764310ed3a89db1139","size":3274,"data":"","first_seen":"2026-09-14T03:04:38.110883Z","last_seen":"2026-09-14T03:04:38.110883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7cf9f286124e59fc18a05c07b87225b","sha1":"28d61615b8f53c0c80cd4e1c247de0ea70fd5aca","sha256":"b35664d732c1ac39eb9415b7508cba8d2bbd154ea8c754cd67eba1ffcaa3f4bf","sha512":"a8bcc565f4e2e5393a6e381d18402968b50b301d3b4ca59c17131873333cd09756f894ea8197aee4a1ac751de86d7a8920fad332c8f29b009a87b8b4049decc0","ssdeep":"","tlshash":"5821f5d822e2c11f12ce1c536e1a6b963cb6fb6181c8f08347a43e4918fc603c5a5ce8","size":1299,"data":"","first_seen":"2026-09-14T03:04:38.111851Z","last_seen":"2026-09-14T03:04:38.111851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcd374d1e20ef7b634eff0eb093b889e","sha1":"bd44a0ed68797a196d677e90ebb86f1db7eedbce","sha256":"f94afc575c7c4e162822b871ef75a7065bd745bee1d45ff898e070286852c86d","sha512":"b11b2f58d27044f80efe2c0e8419817b18b0490f996830b603f6192ede22397a36a8fb77ac6f9fef156a771aefdab5c5af0c7aa0ae02130b5296eec6d754fe99","ssdeep":"768:sJyqeb2lFEQXriAsYwGz45VIBS2PU5/f5GCXHBen6uQM8xlnWt3etlCQAEMj65W6:sJyqeb2lFEQXriAsYwGz45VIBS2PU5/f","tlshash":"ccf2e9e866a6d61723ce1e57ef42bfe61476a1a7d0c8b18786e43b8d10fc207c1a5cd4","size":34586,"data":"","first_seen":"2026-09-14T03:04:38.113017Z","last_seen":"2026-09-14T03:04:38.113017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"589a2b4412427114933b9a1229b6ee18","sha1":"66c3d821c737836761f94353f706b16a6132b3f1","sha256":"e44d7c8c38abd1e501272ef554333d87bf2ca3d05f3ddb57350f468a3d506cb8","sha512":"9149fa7e478ad117a560c9cfab7c7d48922eb395cecd2ab7f7aa931af7cc33567ae6cf722003bebb4ef94655dbbe306694677aecd154ae7b670ae43064ad8e4e","ssdeep":"","tlshash":"a921f9e432eac12fd38eae23af0b2bd524659ad684c5f047c1657a6d20fc613c966cd4","size":1165,"data":"","first_seen":"2026-09-14T03:04:38.118433Z","last_seen":"2026-09-14T03:04:38.118433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a17528bb17f23b7160318169594a5cf7","sha1":"175494c2c84ac091626942fb8d4026e7f7ef9c7d","sha256":"1eb442568711261e80f69857acfd21f87b4f1678ca064aca138eb783774ff7ce","sha512":"9022f81fd4f7d381d6f7687c7b136980d00eef888612171e9fb701205adc05715bf2f26e08f67b37321b67a1950b5e87b7ceaa24132ef1540fe22b464a133200","ssdeep":"","tlshash":"dd01e14918e85034036bb1b95ebf991d3424150f2d0e6d25bc5d89108f88b3e1cf7e0c","size":712,"data":"","first_seen":"2026-06-08T12:56:11.683858Z","last_seen":"2026-09-14T03:04:38.119465Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2049397e76a7a82a183c0df846fd731","sha1":"bc4d2ad05b3fbfdc2485ba35abeff47a4cece6a5","sha256":"be188500a346d4eff4275e9c28c59e43ce168defb92e469a1be004686988579a","sha512":"3c34231c5cba7c25c2a3f94c0ac875fb54a4f8f149d88a52f65a901e2bf347b5e4eaf61efec6d2f6d7e273229c6df2680788d29ec59f097aabbceed418baaea5","ssdeep":"","tlshash":"31c09296205ec22128092ed8032a80d243503289b10ac0893f1fdaa3bf93c8fc193c9c","size":136,"data":"","first_seen":"2026-09-11T07:38:11.347042Z","last_seen":"2026-09-14T03:04:38.120319Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e55604e045bf0024ff7e01fdd16c701d","sha1":"af003efe987a565f1bd02f8aae59c5fcce059282","sha256":"4ec87e9893397d6d34541acb44737611dd255fd3b94b0f95cad0672e222564b9","sha512":"200d469f181f0abc3ada340f4b863b866e4d0275bd942cce706ff8a23c10ad04dfa390c9ea5c44a2f64e58003105949a333c795b8c1b84d9c49abff2d7d472cc","ssdeep":"","tlshash":"93700000802a08a2220280828a80800003a02000b2023ae0aaa800002a82c2b20c0002","size":24,"data":"","first_seen":"2026-06-08T12:56:11.685634Z","last_seen":"2026-09-14T03:04:38.120911Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbbc283898bdaa30a196fe180239b3f","sha1":"a58c0b37f645c7f8e8f2afd221ad824253b4e5bd","sha256":"edef6c012f062322849cccff36700a4391f319ac9c3d9ace42bbfa732eb4439b","sha512":"6df06ce17c1ed8cdff77a50853b41540f125f859764d6ffa9b3ff2fdb9137f0f1f62ab7d1ec01292e036fc29fb3f27cdd2479d8fbcdc59b7bcf61c763a5def57","ssdeep":"","tlshash":"2e11595c13d3a43f52e63cd3290a65d262e52f586569f5078e83288d08f4f07abfdca5","size":1045,"data":"","first_seen":"2026-09-14T03:04:38.121561Z","last_seen":"2026-09-14T03:04:38.121561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"78f3d2eeb999275a12d872aa522fe8ad","sha1":"d60bc80cc33aa2bd38cb4c6fe5d1fdaf77965b94","sha256":"94e36761b4237ecf1f636013d7067268005d601adc5d241c142c563dc5cef7c1","sha512":"3bcb85d070626491da19ea11d5454ae382154463e43a2a00dd3fa92e2053732a4ea9f7bb8dd895e59fc6648e981b69fb1bbfba107e43fe546de679aca2a3faa0","ssdeep":"","tlshash":"0c219de493e3c21b61dd3923be0a7be53576696690cdf14309a0775d60f8a07c4b9cc4","size":1341,"data":"","first_seen":"2026-09-14T03:04:38.122727Z","last_seen":"2026-09-14T03:04:38.122727Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/web-sdk-v1.1.8.js?v=1.0.1.4","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"407da8b2b5bfc63458e9a336b0a04df2","sha1":"8dad96c8eac3205de1a7f6fdeffe8621d85055dd","sha256":"fea25103704c04ece90b0d66031808d114ad3db9ee38a83a25cb659c22658be4","sha512":"028ff566de85363f4dbcc3a4523da1a14fb923a30eed603ad75333b0175d929a3b6693e6980f1fc4064b503bc7b1134ef580c1da8aaf937646a3e1ea79324cb2","ssdeep":"1536:NFKGI48OZ/EgQ4F4WZViFeTzzR70hCzR7UKVhyzZzSL2+vS9T7d4:NBI8F4WZEhCzRBVhy1oM7W","tlshash":"00b3f989f6a2b02251a71176b03f450ba33b196b2d4d0054f364ade87c7d68ed37aedc","size":107861,"data":"","first_seen":"2026-08-08T17:20:34.923053Z","last_seen":"2026-09-14T03:04:38.01989Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/index_main.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e540c34ba80fce350dc962e59b016595","sha1":"3739f0441944b0384124edd2ef1e083230223a09","sha256":"d451e0d75648b36e46d8f91f3b8b528f92b1d74a4dae355378ec90faba07c6d1","sha512":"f5a9b11c6d86aad284e65d98c9ea62247ba71a5c22e6a67d587c762ccf9e0ead11cb8416f5ed0c811e83c4915e553a93726e3bd5d29f4fb01901662a5bf01eb0","ssdeep":"96:lb3SsKaM7lzz0xPpZgV1vBoCBpBj4FrnPEGd3g21g4KaT:gsc7lAG1vBlBpBanPjdw21g4KaT","tlshash":"5cb10db929f7006a8133f47c5bbfa00137316407694aee14bd4d4a48ef5e26d72f2ac9","size":5326,"data":"","first_seen":"2026-07-17T08:03:30.560857Z","last_seen":"2026-09-14T03:04:37.973334Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/crypto-js.min.js?v=1.0.1.2","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-09-14T03:04:37.951117Z","times_seen":153969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/plugins/lazyload.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7139f0a97112025799f756c0899f1065","sha1":"30200c48cf6dfe113da59f34d5717931db95936f","sha256":"59a9eb35467114d1b9de514e0bc8076fd718574bf31f7f682818edc4e6c7b2fe","sha512":"a3dfe1a1aa79a677aba128171310c1153a91239c93583dc251aafda4ec06801d3d1ba9453c7c6624d2ab56b73db246e3a8649804626f9e9c969f66f97b6129dd","ssdeep":"192:zmhIGnQPGwaf49zCFNnBGHa75v6+s3y/yD4I1P1kVHt0kegt6rxhadLbPlJWCR/J:zmZBGE9L4GigQrxkdlLF/qo","tlshash":"b3223d5d2af771670973b4accb2f99167a00900b2009de667e8ca2546f05938def27ed","size":10866,"data":"","first_seen":"2026-07-16T03:06:17.917244Z","last_seen":"2026-09-14T03:04:38.068788Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/validate.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d450438b2c178f478b49951c2edaaa76","sha1":"5bea6876fb1a59f06630d7b9ec4248fcb83e40ff","sha256":"85aa24f863da581d35192e46b1a30091aa8281a95acff90ce3214d0ee727a1af","sha512":"7a74bc6d4d943e0246d4396d4f74535660c63153a57cdc51bff4270f445472fcd2fa5c2a688213140b56ec989d4a881f5be4a76248841b43d5ba8ec416002543","ssdeep":"","tlshash":"2ff0f64d18f2a5150d67f4bcd54fc46b715911433019ee1bbecd56a06f81be84af03a8","size":648,"data":"","first_seen":"2024-12-01T05:50:33.453054Z","last_seen":"2026-09-14T03:04:37.967441Z","times_seen":1028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","size":6947,"data":"","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-09-14T04:25:11.66473Z","times_seen":14969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/warn.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48e1a6ea23cc4d1a788c029c806f0e1f","sha1":"142417ef6c345202dce4f6529940efb99d206aba","sha256":"d199a1d14c9d23cc629f5f9099c0e388ada82b946fe5a9831157b30bcc1978db","sha512":"3437f60e4311b1cf3e8dbffaacd20b636e81bb39d842d61b18ff24f2df351e718f44ed868c3d1bb4c3d70aab6c75db2b72097dd51d0bce7f16a8e400c8d86005","ssdeep":"","tlshash":"819002281dad9248057721d4581b994995517430124b20514edca0504d5893c022b709","size":52,"data":"","first_seen":"2026-01-06T16:02:35.221023Z","last_seen":"2026-09-14T03:04:38.035525Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/common.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc46f20bac3f2ca3adcd82ff558316b8","sha1":"7ea6ab76ae323f1e7c67c49698bae0c559ee0de9","sha256":"7a6bb92eb11c36d8b3b5a0637e9c22e83bdf7e1aa699731192f133c937dcd4db","sha512":"40c34def40194083fdf69bc097c774d30330260344674d88125df76885fdf2a90493436a4a9d8decab546e491e3a4ce68491fc5f7fa91f3b61232992372d6eaa","ssdeep":"384:p3mJnkTaAxUvh8Wsfa7XvhfsqQYKyFSWC4M4cr:pWJkuAWhgfa7fh6WU","tlshash":"a7b2b92a34f2142149b771795aefa4003322a107e54bde18beec4b845fd5b3ce3e6799","size":24076,"data":"","first_seen":"2026-08-06T02:20:05.929218Z","last_seen":"2026-09-14T03:04:38.077779Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/jquery.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-14T03:04:38.013845Z","times_seen":31906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/crypto.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-09-14T04:34:26.983648Z","times_seen":32700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/swiper.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8545ff828be06e095210e2d78eb8883","sha1":"f5874e21237fd416511b6a00b4ec89f520e74d2d","sha256":"e738a029aa0ec2c3a746c9e5c81d1ba3dcc6ca6f979282cefdab4625446ef937","sha512":"878db1ec50b3fc987f7325ec0df44705853ba624b179678ee8fc1f7da51ad2f3b052dff84eb5a0d8eb9c824239f5d83080cc405fa3b3d9f217f1af38e041062c","ssdeep":"1536:yKJjMfGmX0xw8NfmvSlk13Oa2BlxvHepwkEl+m9NuRF1CjmA/BnmYlysh4KkMv3X:3JccdNWoapwkEweBnIsh4KB3hDpi7UJ","tlshash":"d0e3e889a220b57656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feefa","size":151102,"data":"","first_seen":"2024-08-01T18:59:16Z","last_seen":"2026-09-14T03:04:37.971783Z","times_seen":2400,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/utils.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"985db9edcd1fbd56e52ca80de9c291af","sha1":"91b58299a59ac0a8a7ab59cebbc576f7c59c4ec1","sha256":"f1aacd5936646301406a18abbbcce4bd79731f97a6b0b4c2529b10acf70e2e1a","sha512":"1612093f2fe32f9227822fbdffc41c8c762b50af5a29a07d89bd077f1c93c4701e892776582c872b6cd5889de1265f4794f28e0422853a62c8d8f82910f54c97","ssdeep":"192:MBYxE7w2imkh8eqRs18oQ8zta4zti8Veih9BJxiaGJ1EdVTDEyBL9VTDEyu:8N7/imkhcRsuo1HNFHiA3738","tlshash":"1302720929f3555041a3b468a71fa600f634a1233429ed59bf4ce7a0af45e69c2f3adf","size":8482,"data":"","first_seen":"2026-07-16T03:06:17.977767Z","last_seen":"2026-09-14T03:04:38.062321Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/http.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98646362ec4af0bd10c76c6700e3136f","sha1":"34fa807b8fcc6ec031995f2caeebbe00bb3a620c","sha256":"5616e94757fc3895f8e8705d9da8d1d012cebadaeec3a7608cbb05c48bf51d82","sha512":"2d789258790bf43818af9dacf20f6f6d398692715d07f54670f5ac971a0ed285ce4d9d7b0c443738bc923a078849d250e9be967cfc4c3eae66c0b089490cbf5a","ssdeep":"","tlshash":"bc41cc4b38f5941245e3f9bc97cf5034b92499439418fd247e4e8be05f458ac8a72bcd","size":2022,"data":"","first_seen":"2026-04-29T14:57:32.800056Z","last_seen":"2026-09-14T03:04:38.101579Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/zui.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc980c40f24817c7366dd301ae9a6574","sha1":"9cf56f94deef9a085b85b80029d5b4b8017f3a5a","sha256":"b353a661a0726c9bcbbda85b72bab0d9af1e7adfc267dce98d84fcb61763ba83","sha512":"fe1b78f1ae21f7af4d9e9318cd9bb5f01effadb5576f7034220bcca9e3fb26d7787fd40c64b06bedd49c7a7e78133e4525159a9dcd280ad3035d5d088f708b86","ssdeep":"768:AWL79DxTqgH92F95edSGCuaUCwtcXK6b6+M3Zzz2yCK:dhL92gSGCKxtcXipzn","tlshash":"3f03710b76f02530921bb172195fa5087136a42f4e46fd443d4c92a88f6d93cabb6fbc","size":39571,"data":"","first_seen":"2026-04-19T07:09:17.014336Z","last_seen":"2026-09-14T03:04:38.102208Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/video_helper.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d037e927d0ed7a3d38d623feaa5b5b12","sha1":"b9f97a523d5c0a2f1963951fa357d6f6ddad754e","sha256":"03138e670e9973b29e3647b757fdf7fa5c5256d75815889d19b5bd56b09e1742","sha512":"68cad8a9d1e0a5b0162a5e1614a0be882acbd6c0817389b5d3d5bac42fb653093d22c9be19950f19e37bc1095c09ff02ac7ecd026f3900225ed95465fd4396dd","ssdeep":"","tlshash":"5951772e22f160661f5370763ddf450172aad103240e8f51be8e93a49fa653587f2bed","size":3119,"data":"","first_seen":"2025-03-30T08:44:32.867213Z","last_seen":"2026-09-14T03:04:38.089243Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/validator.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86b6dc8ccf6dffeeb920601dccc7fde3","sha1":"3171e9146d3c0eb1d22b2ee5f0531e064ccde365","sha256":"943d288e5c21c83c26b2a8b0da35339bc849b255870f5d2bbeda6697dd524793","sha512":"02d3c288ad8aa2467a6f1827c1fac67acd3fe3f36e4b54512a95dc2518c796445552fe73c2b8f0c49f7eeb70015555d6751c9560634f33a5a92164bafb7f5a98","ssdeep":"384:zcsgngnF2SE1B3pvYSrLQfqLfuNlMUaeopveoTweouMeo72eoukeou7eou4eoudh:NOzBpvbfuNldaeeveiweJMee2eJkeJ7+","tlshash":"367242c836d9b41d86b321f6202f7057b22ba455042ed841f3bda0f5aff845f5252faa","size":17046,"data":"","first_seen":"2024-11-17T05:55:40.958015Z","last_seen":"2026-09-14T03:04:38.063034Z","times_seen":1204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/web_tracker_v18.js?v=1.0.1.4","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"056c8667570a5143252775bebb16e1d7","sha1":"0215756f4e10f6e66da27a71e80d9c945c50bfed","sha256":"4b1c67a73da3a5c22be38d581837033329283129976f4f8bfbe557843d22bec6","sha512":"3f21c50d15455ed8cade543c1cbcf71bdcec50e1be8864ca379ecdbdd2fc5a78bf68cf5c7f2d2971735ffef837a5b0872c2954e1cb4f87c14fb217fb8a9d8970","ssdeep":"1536:m8og8MQM0BbX4tMx+V+mMZoqRJUeuQV1nNh:H89iM5VnP","tlshash":"b77394443be0b89523d75b7b3b1bb5e5f85f1caa6848044be201fc94f5a1716eae0b34","size":77080,"data":"","first_seen":"2026-08-08T17:20:34.96195Z","last_seen":"2026-09-14T03:04:37.986901Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/require.js","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09aad7fd8e9d3243a959fe0939c8e03","sha1":"c833c521341ce46183ad1b132acc73d66ccdcdaf","sha256":"c8a84fc28195df3f6388caf78a0aa32e95788e4898f573f198cd4fdd8e1a9588","sha512":"b542218b267aa37ca97b91cdc84d8af0350cb343d803a9820d084c6afbc8a69dad20c14d6db08177a6b4f8f6e4aa31571f892b67eebc1fa848ab46951d0cad13","ssdeep":"384:Cv6/vGiN5cMU8QatLePlko998VpSAIiQbvPHSEDO11yy1qlMW2IP+VW4Ml:fG7MU8qPlko998PhIhb3HSEDM1yy1qlJ","tlshash":"ae82d7ee37e5f913b22232f490af504a6277e953140cc544f619e8f5acb856876a3e38","size":18194,"data":"","first_seen":"2024-11-17T05:55:40.964969Z","last_seen":"2026-09-14T03:04:38.082754Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-R4PBHCTFZN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14dce8692e2c3fc54767824622f58152","sha1":"ed0d992f2f1f29530400516c3946c8aae822c470","sha256":"da2056dd6b906f93ec2336b4569c849c5df6ebc6e40fa0ea0dee86f510c3b15a","sha512":"4a7e33444cca62ff247c260b259e3e5d33c0ded06226e49fd9e08fd76852dce8bb9ea9e1ddf88b773a5a00668d441d0ad907f5cfb8357645ad9ef4e4ef018e63","ssdeep":"6144:FtFPf1L6SSxQhmgyyEydQV80ucTPbNELR3/jbxWS3PKNS3I9Z:Fz50yAynNxJPiSk","tlshash":"bfb409ce73d674229396f078903f01cba57b29a2b49cc896f18adce02e3455a5167f7c","size":530428,"data":"","first_seen":"2026-09-14T03:04:38.076158Z","last_seen":"2026-09-14T03:04:38.076158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Swiper Loop Warning: The number of slides is not enough for loop mode, it will be disabled and not function properly. You need to add more slides (or make duplicates) or lower the values of slidesPerView and slidesPerGroup parameters","filename":"https://beat.diyzxcw.cc/static/web/js/lib/swiper.js?v=1.0.1.94","line_number":13,"column_number":4243}]},"http":[{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/crypto-js.min.js?v=1.0.1.2","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.783Z","timestamp":1789355029783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/crypto-js.min.js?v=1.0.1.2 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 19399\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: f9d2c6e262148fe86aa76415\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\netag: W/\"69fc0d6e-bcbc\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: ZKSqmXOFOz80hDWhn1a5yrigHj3rMmI7u5m5fcSXojkL-srGCtZwRA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48316,"size_decoded":19931,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-09-14T03:04:37.951117Z","times_seen":153969,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/search/sr-2.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.804Z","timestamp":1789355029804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/search/sr-2.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1707\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 07e863263c1981ae6aa76415\r\nlast-modified: Sat, 16 May 2026 07:54:58 GMT\r\naccept-ranges: bytes\r\netag: \"6a0822d2-6ab\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: GTQIQEQTv0MhJAstPZJtg3ikrWpMRw8DcbYnLEySQTrIUaovY4eW7g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1707,"size_decoded":2198,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f172cc99a647d8b833724e55ba67e556","sha1":"5e432e614c0179f359d349e364923fc0eb9eeb6f","sha256":"478fd9c93d16f80cbeb071983b8fa4aa7b60074ef4ac4088d7ea9be7101841b1","sha512":"64e8d39684cd5177f638aada7f5fd93d029d041574a63f22018e86b5e301cbf5ef3be20336269a4bdb1843d598d80e7472a1e3453b3da4fb08d80161c7c5c10b","ssdeep":"","tlshash":"a631d6ca4d51bb6ed05c8872022a7f203ca7252a072685a06e96c2c3c82c864ad413a7","first_seen":"2026-01-12T23:00:02.101708Z","last_seen":"2026-09-14T03:04:37.960568Z","times_seen":647,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/icons/icons.svg?v=1.0.1","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.221Z","timestamp":1789355030221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/icons/icons.svg?v=1.0.1 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 11587\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 4ccc4ad4abaea0366aa76416\r\nlast-modified: Thu, 04 Jun 2026 16:31:27 GMT\r\naccept-ranges: bytes\r\netag: W/\"6a21a85f-7d85\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: HFj0bBwNcsRqjtnF02x2v62SqoYgtu24uWhE0YHlkmPfBeLOyvPLLw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32133,"size_decoded":12110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56a3867c680b2770a44cd7eaaf7f5107","sha1":"09fb75d7e61ad195984c72a7859af79140393bbc","sha256":"f9a5bb89f3322897bb7e467b75fdcbaeff6fd9f4c39d01422976af03ca9aae45","sha512":"2f73fbe782546eef2b3991d2f2cfa4e40cc1fe42a4414e6c10133662ae4228ea4b5bff0313f7bfd436ea03174e2b0b9a12a7e472b29d054ad612953a588a069d","ssdeep":"384:oRtthcCeuZT68nxANMwzTQrdZSPNBDl/IWtdOl+9RXH/3Ulvg4wh5fnMz8pGCxh2:uXE86d0RoNBDGyGYH/3UUfnWshSjE23","tlshash":"2ae2a6e9932c45dc9447c63dff797132532fa0fa30d845aca99e4b38a2931dae517e80","first_seen":"2026-06-03T23:45:32.773642Z","last_seen":"2026-09-14T03:04:37.96118Z","times_seen":96,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091216084791211.jpeg?auth_key=1789360074-0-0-b88ac336222d546ed9b7c8827a98bb64","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.313Z","timestamp":1789355031313,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091216084791211.jpeg?auth_key=1789360074-0-0-b88ac336222d546ed9b7c8827a98bb64 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 84544\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 08:09:00 GMT\r\nETag: \"952daaf191f2b09541c8488069e79d52\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[5],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,3],EU-GER-frankfurt-GLOBAL1-CACHE9[10],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,8],1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2439199\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 20fd8d377fd950aa36c5971b386b1161\r\nnginx-hit: 1\r\nAge: 152801\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84544,"size_decoded":85441,"mime_type":"binary/octet-stream","magic":"data","md5":"952daaf191f2b09541c8488069e79d52","sha1":"79fe8128747da0cf7f3cb51ea3ca94790dffdef5","sha256":"ebf40f71781c5869ba6b01b501a38acecac36199ec27d8535c87512eac51ac9f","sha512":"d543dc1cbd3f482d060771ea25934cf428d80fb46f0746ba6d76d98a9549421aef066f9c6ac153f1c878359db9ba9c7a5be67d57ae6d90ecad4c8bffb0677c6d","ssdeep":"1536:oEeP+qkJ2b4mVWViHgViiiqjjTFlbeEd1+zG9aj9xQC0i:sskfhgE4peEd1+zGwmI","tlshash":"33830201557e619ac6c137fad1a4bfcd220945adc34528d1e09bd4af5a80facfc6328a","first_seen":"2026-09-12T23:27:37.745944Z","last_seen":"2026-09-14T03:04:37.961777Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":449,"connect":49,"send":0,"wait":95,"receive":80,"ssl":430},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/2f4115dad3c959fc0a0445cf4d6648ea.gif?auth_key=1789360108-0-0-88b8bb291fdf86e8e701445e7e1b7c6d","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.335Z","timestamp":1789355031335,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/2f4115dad3c959fc0a0445cf4d6648ea.gif?auth_key=1789360108-0-0-88b8bb291fdf86e8e701445e7e1b7c6d HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 47440\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:08:01 GMT\r\nETag: \"d327b6f9cfe941fa9f8eb93b27773a57\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[10],EU-GER-frankfurt-GLOBAL1-CACHE10[0,TCP_HIT,9],1.1 944dc31277adc1021b0776fe818f07f6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2369296\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 117387bb7cc568477b3f93004d666171\r\nnginx-hit: 1\r\nAge: 222882\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":47440,"size_decoded":48338,"mime_type":"binary/octet-stream","magic":"OpenPGP Secret Key","md5":"d327b6f9cfe941fa9f8eb93b27773a57","sha1":"7495e8dfe08f256ba597171c68d50ae6fd83f08b","sha256":"6bd98cac38972624c4dfd5bdbaf92688da9c660284c7f58c90ba0d858e55430d","sha512":"a98303f16b6bff0a2fe5b12b7b1240433503a73bcdc64c2796de7f4c90ccabc1d55d3025cc87773c62f878f6e5eaae862e985983bf747654431a6474ab79620c","ssdeep":"768:triqQ7X8n3bC/BEYn5vOcs9Ce+B8Bn413SK/jqqBgn4VRtu:tri37XW3Opd+5+i41trnNro","tlshash":"40230280932c200c9632b072dd6d679e07aec979c503be56a7ded16f168e3d121f6e16","first_seen":"2026-09-12T09:44:15.0407Z","last_seen":"2026-09-14T03:04:37.963256Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1051,"timings":{"blocked":998,"dns":0,"connect":0,"send":0,"wait":50,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.255.198.114/api/eventTracking/batchReport.json","fqdn":"54.255.198.114","domain":"54.255.198.114","tld":""},"ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:04:01.731Z","timestamp":1789355041731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.255.198.114","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A8:42:07:A5:78:06:03:7A:7F:86:58:26:5C:3B:99:86:DB:4E:BF:A4","sha256":"0F:D2:5B:64:F6:93:3A:92:F0:2B:8F:0A:BE:66:3C:40:D1:D4:4E:21:AE:B6:3A:A6:14:AA:9F:86:2A:A6:B3:3E"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.255.198.114\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 5668\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5668,"data":"[{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"DX-065-247\",\"creative_id\":\"DX-065-247\",\"ad_type\":\"1\"},\"event_id\":\"de798fe44da6437c2044e3b0b56fce64\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"4d03836b7def1cbe2f749582d9bf89f22497c68a43d8f9a855c657cd002ff995\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2010535766843670528\",\"creative_id\":\"2010535766843670528\",\"ad_type\":\"1\"},\"event_id\":\"545772545982b3b51087ff301b2c8166\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"1157c7dc819831819701116cad7fb49b0a2435a1e494141109bbcbbb3fe62d71\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2092982275244056581\",\"creative_id\":\"2092982275244056581\",\"ad_type\":\"1\"},\"event_id\":\"19136b3db0764653aafb5d6d382bff95\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"ec5e178ff6b0e79466ed90185ee51d79213d3b6e7b96df93e743fea999c05d9b\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355036,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"14\",\"ad_slot_name\":\"全站弹框\",\"ad_id\":\"2094469213542400001\",\"creative_id\":\"2094469213542400001\",\"ad_type\":\"1\"},\"event_id\":\"3b7a5be7622aa8fe193b3415761907ce\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"c04d6c463a0874e468ada80359693bf606d6fab0012a9cbfe63f1ba1394bcd47\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355036,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"14\",\"ad_slot_name\":\"全站弹框\",\"ad_id\":\"2097535679152852993\",\"creative_id\":\"2097535679152852993\",\"ad_type\":\"1\"},\"event_id\":\"c2deec84b9a28b3102a8f7858317bb4b\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"318d7523d401aff5a4cbdb88b677510c50a101564b7ca477288b9d33bb2f1bdc\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355036,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"14\",\"ad_slot_name\":\"全站弹框\",\"ad_id\":\"2094431903701295120\",\"creative_id\":\"2094431903701295120\",\"ad_type\":\"1\"},\"event_id\":\"07cef76ba0e4c451b6be26c6b1826e50\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"4b291eb6d72e8de97a0f6a2eda8a7b91a00cb183a72a0677d4874da3cfce8260\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355036,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"14\",\"ad_slot_name\":\"全站弹框\",\"ad_id\":\"2097539563145465856\",\"creative_id\":\"2097539563145465856\",\"ad_type\":\"1\"},\"event_id\":\"f5814096d7a4d270976c0ad9054f67d6\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"b7883691a80c193e6b3726273e17500faf93f0d24723ffe56163db66a8d00f80\"}]"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:04:01 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":423,"mime_type":"application/json","magic":"JSON text data","md5":"0ab94d0fc1ecb3477a682ada19ad817d","sha1":"e6311ec9ae74beb1f7461c0ae5e81c8f835e0f3a","sha256":"7f86129f0513b8495b7ecf4f1414314df859f22b58b45b9036f4d9e48df30074","sha512":"d2da24f6eda58fd1fa39d5f154744ec618de7a1f431f149104d745db588c59b65ce10f819cc611a7241aa1470d3053c3d69ca57709becdf95e54556d4f4789bb","ssdeep":"","tlshash":"a4800433141c04430501354c00053f04105c11534f100771cc5c4715c75c074f151410","first_seen":"2023-08-16T08:22:40Z","last_seen":"2026-09-14T03:04:37.965385Z","times_seen":8352,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/ss-h5.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.796Z","timestamp":1789355029796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/ss-h5.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 2223\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 779a85696ab5952f6aa76415\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\naccept-ranges: bytes\r\netag: \"69fc0d6e-8af\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: KVcDQew3Dhawupy1Q243lXDloS_Wlu0I91EOLmojRtHNGm9kYRcrvw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2223,"size_decoded":2714,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f422b2d7601ac4e67c081ff2d089db32","sha1":"56c821337c8180eb1559fea283c4a3c9a5d88e6e","sha256":"ac0ed9a2ea152137f5ffac787f77da3575fab7c7c8c16a00aeeaae3e68e3a2a1","sha512":"a4fb8b78f04f82b2a4a2970b223a60ade9133f1a573ecc489bf21f8c048d6f9874d450403400b5e2a41f6d2a53bdca9c075e14773dcabbc0fedac4b962f19422","ssdeep":"","tlshash":"b74139eaee8e1036d45374b1c437fed3b81f7706bd541824ed84289d624b0aaaf02ac0","first_seen":"2026-01-12T23:00:02.120967Z","last_seen":"2026-09-14T03:04:37.966132Z","times_seen":646,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/icons/icons.svg?v=1","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.013Z","timestamp":1789355030013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/icons/icons.svg?v=1 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 11587\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 4483c6162478ffca6aa76416\r\nlast-modified: Tue, 02 Jun 2026 07:02:32 GMT\r\naccept-ranges: bytes\r\netag: W/\"6a1e8008-7d85\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 5zEycvjGUSoXmc4hAViIxBT5Q5mMRtKi7U_JxwjjShxDpvvJ1TiGcw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":32133,"size_decoded":12110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56a3867c680b2770a44cd7eaaf7f5107","sha1":"09fb75d7e61ad195984c72a7859af79140393bbc","sha256":"f9a5bb89f3322897bb7e467b75fdcbaeff6fd9f4c39d01422976af03ca9aae45","sha512":"2f73fbe782546eef2b3991d2f2cfa4e40cc1fe42a4414e6c10133662ae4228ea4b5bff0313f7bfd436ea03174e2b0b9a12a7e472b29d054ad612953a588a069d","ssdeep":"384:oRtthcCeuZT68nxANMwzTQrdZSPNBDl/IWtdOl+9RXH/3Ulvg4wh5fnMz8pGCxh2:uXE86d0RoNBDGyGYH/3UUfnWshSjE23","tlshash":"2ae2a6e9932c45dc9447c63dff797132532fa0fa30d845aca99e4b38a2931dae517e80","first_seen":"2026-06-03T23:45:32.773642Z","last_seen":"2026-09-14T03:04:37.96118Z","times_seen":96,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/favicon.ico","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.473Z","timestamp":1789355030473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/favicon.ico HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\ncontent-length: 67646\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 2ddd9708aab30b456aa76416\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\naccept-ranges: bytes\r\netag: \"69fc0d6e-1083e\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Wy8xItNVBHg8OQBU2wOqdeRGEHfSexaJpWh9Kw25nMNjBrezXRYSWg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67646,"size_decoded":68143,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"43c3993e80fb79adc6312ad66f5795c0","sha1":"2374bd765ce439fedef9715828b597c14333273e","sha256":"05e583d21eca6c8f05287491025ec73918625e1e17ad40d39fd2ccd573494cd1","sha512":"7064ed49ecb1e7a39292f3228eef6f5c551a9edf3a6d3ab0fb0f5f5d6f5b41f1e8f8f38e28d66d473e49dcce0f1c9ffcdcbef4441965850cac128f0898727e56","ssdeep":"48:b4QWeUvJviwd4JCPLQz+iaFhYxtowXoa2WTXswEEQCEV8StQRI3ibkeW4HMAMPU3:s95vAXJ8LtiaSIUQz8iQHbw4XsEAgw","tlshash":"5663216095703c9be7002d76c0f9f7aa94f43eb5dea45803a0bd315e4b3c2aa5947f89","first_seen":"2024-11-17T05:55:40.968037Z","last_seen":"2026-09-14T03:04:37.966803Z","times_seen":1033,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/validate.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.860Z","timestamp":1789355030860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/validate.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 648\r\nserver: nginx/1.22.1\r\nx-request-id: 60012d5288af204c6aa629a6\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\netag: \"6a08229e-288\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 3N3uDuTLibjTLp-EGs50Dwnv_Rnin7NOgOfBf69efn9WLVbZX63FMg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":648,"size_decoded":1157,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d450438b2c178f478b49951c2edaaa76","sha1":"5bea6876fb1a59f06630d7b9ec4248fcb83e40ff","sha256":"85aa24f863da581d35192e46b1a30091aa8281a95acff90ce3214d0ee727a1af","sha512":"7a74bc6d4d943e0246d4396d4f74535660c63153a57cdc51bff4270f445472fcd2fa5c2a688213140b56ec989d4a881f5be4a76248841b43d5ba8ec416002543","ssdeep":"","tlshash":"2ff0f64d18f2a5150d67f4bcd54fc46b715911433019ee1bbecd56a06f81be84af03a8","first_seen":"2024-12-01T05:50:33.453054Z","last_seen":"2026-09-14T03:04:37.967441Z","times_seen":1028,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/985d35bcad6653b0eba23a0977695190.gif?auth_key=1789360108-0-0-ad89a01bf6f8a513ce79d72c0dca63f8","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.344Z","timestamp":1789355031344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/985d35bcad6653b0eba23a0977695190.gif?auth_key=1789360108-0-0-ad89a01bf6f8a513ce79d72c0dca63f8 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 45456\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:35 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"3949c29bb601213385676b5fdddba234\"\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE8[2],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,0],1.1 94328d2509009edc0657f5c786a93e42.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 49cd3b1b3bc68a1b08a160bd66ebc9f0\r\nnginx-hit: 1\r\nAge: 828117\r\nX-CCDN-Expires: 1763887\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":45456,"size_decoded":46352,"mime_type":"binary/octet-stream","magic":"data","md5":"3949c29bb601213385676b5fdddba234","sha1":"8c7f8dcfe8cec19312df09e4deb868694e5f9a2f","sha256":"c4c5e80e9df6794902bbe407477ed948b3b4025fde04addb505b61c558f9fba8","sha512":"fa43bf0d6848feb3088c12b919cfb408503d1a49af4e13d811953f765b1d7c18a0112c8565f35a314d201e1b51b446f4ca1c9b959c975d61d3f834700f1645c1","ssdeep":"768:BroKrvArnwYP7ASerGUgaFlcQs4NA6Nnm7MIiOdjEyd9y05ZV3Nw+1CKrj7qUDE9:BrVorn3P7ESMnm7Viw4ydrzX1CKvGkE9","tlshash":"ef13f19d1126b56dd36e40229574c3bef6b817213a14a64244fcfafef311a01cab94e9","first_seen":"2026-09-06T03:54:00.932267Z","last_seen":"2026-09-14T03:04:37.968085Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":1052,"dns":0,"connect":0,"send":0,"wait":55,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-12/cd7d984572c613075297b1b37ad592e2.gif?auth_key=1789360108-0-0-12c6e39809f950a8b6761b8e9d571eca","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.347Z","timestamp":1789355031347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-12/cd7d984572c613075297b1b37ad592e2.gif?auth_key=1789360108-0-0-12c6e39809f950a8b6761b8e9d571eca HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 226224\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 10:32:48 GMT\r\nETag: \"5299c8268d146c3fcc4cd11d7a7f5107\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[1],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[666],EU-GER-frankfurt-GLOBAL1-CACHE14[508,TCP_MISS,666],1.1 803246727539350977d724c9e4a027c6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 7b39e8b936e43f501a1f3fa03995514d\r\nnginx-hit: 1\r\nAge: 145861\r\nX-CCDN-Expires: 2446142\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":226224,"size_decoded":227130,"mime_type":"binary/octet-stream","magic":"data","md5":"5299c8268d146c3fcc4cd11d7a7f5107","sha1":"5c4ac60c866c38a592a5d58353f9c71c3c04b5e3","sha256":"009fdea5b4d57973ec548432c1ea36c9156f893f2ddc36a3d8b4b0b7a4865077","sha512":"f13c8bded4b2b753d60591c57c9f0f4bb72cfc2d3a9924bbfb4e1a57aff97c390fc27fb3a23d8333494d98afbdeb5fdf654e33c4d6ace3599256a17b75f1c018","ssdeep":"3072:Ygc5fPIwOF/S+uGA58GBfKjq1KOcoEVhylOXWwHjlmpij7La6j7urDOqryXUxTiJ:sXIwlhGC9kaEjYAWwRmS7La6WjDTCh8I","tlshash":"0c2412d071c3693e01c1cd70ebafb27b799f042513168becad1bc917a62603a63d466b","first_seen":"2026-09-12T23:27:37.696278Z","last_seen":"2026-09-14T03:04:37.968734Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":1059,"dns":0,"connect":0,"send":0,"wait":54,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/636b7e267405843b8230983ae23ef925.gif?auth_key=1789360108-0-0-77147115dccf636bc35131591d2c7454","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.629Z","timestamp":1789355036629,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/636b7e267405843b8230983ae23ef925.gif?auth_key=1789360108-0-0-77147115dccf636bc35131591d2c7454 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:56 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 357008\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:10:26 GMT\r\nETag: \"92cdaf9d081f8a156f6253d2662590d7\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE6[197],EU-GER-frankfurt-GLOBAL1-CACHE1[192,TCP_MISS,195],1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 2d0648ba09ef4f023418c446427183cb\r\nnginx-hit: 1\r\nAge: 222792\r\nX-CCDN-Expires: 2369295\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":357008,"size_decoded":357912,"mime_type":"binary/octet-stream","magic":"MIPSEL-BE MIPS-II ECOFF executable not stripped - version -20.-31","md5":"92cdaf9d081f8a156f6253d2662590d7","sha1":"1a6f9ce48c69af0a0b7247eed48462bd63f366af","sha256":"b7cee2c894618da6dd3d15bf18c651a3a148e9eb050d8ca12d3235c2c859b5fb","sha512":"e188c570d49a23df6c253771cd380dc2ce732b6a77a896256258cbe88d46979abfdd8a48a0e00febfd73a001b058cfefd42c58f1b68cdcd6d93b8a5861f64f9e","ssdeep":"6144:B2vw1gBUyv+icwKB9YmSMeuU6sJZan3Ia6WzyiZMsqkD5+KQSPP:B2IGByp/RRjIaQiyjO5ZrPP","tlshash":"74742313b12ae3cc756c8a4bd1d0795b85acffdb9bf2dc818428616746f4427d827ab0","first_seen":"2026-09-12T09:44:15.055242Z","last_seen":"2026-09-14T03:04:37.970063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/swiper.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.289Z","timestamp":1789355036289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/swiper.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 51049\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: 76435e4f52335a4c6aa629a7\r\naccept-ranges: bytes\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\ndate: Mon, 14 Sep 2026 03:03:55 GMT\r\netag: W/\"69fc0d35-24e3e\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 9Uw8uD6ek7eim2xoBfcZb0z-PPEc8DeC8axnqxpxvVPvpvowAqRqXA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151102,"size_decoded":51588,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65282)","md5":"d8545ff828be06e095210e2d78eb8883","sha1":"f5874e21237fd416511b6a00b4ec89f520e74d2d","sha256":"e738a029aa0ec2c3a746c9e5c81d1ba3dcc6ca6f979282cefdab4625446ef937","sha512":"878db1ec50b3fc987f7325ec0df44705853ba624b179678ee8fc1f7da51ad2f3b052dff84eb5a0d8eb9c824239f5d83080cc405fa3b3d9f217f1af38e041062c","ssdeep":"1536:yKJjMfGmX0xw8NfmvSlk13Oa2BlxvHepwkEl+m9NuRF1CjmA/BnmYlysh4KkMv3X:3JccdNWoapwkEweBnIsh4KB3hDpi7UJ","tlshash":"d0e3e889a220b57656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feefa","first_seen":"2024-08-01T18:59:16Z","last_seen":"2026-09-14T03:04:37.971783Z","times_seen":2400,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/index_main.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.271Z","timestamp":1789355030271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/index_main.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 2244\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 233903036b17d4fa6aa76416\r\naccept-ranges: bytes\r\nlast-modified: Fri, 17 Jul 2026 02:36:04 GMT\r\netag: W/\"6a599514-14ce\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: is-j6b6wUHfArFZ0JdpqZT82AReznbAOxCw0fupNAj1sy0i03M5XaA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5326,"size_decoded":2775,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e540c34ba80fce350dc962e59b016595","sha1":"3739f0441944b0384124edd2ef1e083230223a09","sha256":"d451e0d75648b36e46d8f91f3b8b528f92b1d74a4dae355378ec90faba07c6d1","sha512":"f5a9b11c6d86aad284e65d98c9ea62247ba71a5c22e6a67d587c762ccf9e0ead11cb8416f5ed0c811e83c4915e553a93726e3bd5d29f4fb01901662a5bf01eb0","ssdeep":"96:lb3SsKaM7lzz0xPpZgV1vBoCBpBj4FrnPEGd3g21g4KaT:gsc7lAG1vBlBpBanPjdw21g4KaT","tlshash":"5cb10db929f7006a8133f47c5bbfa00137316407694aee14bd4d4a48ef5e26d72f2ac9","first_seen":"2026-07-17T08:03:30.560857Z","last_seen":"2026-09-14T03:04:37.973334Z","times_seen":42,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091217055888266.jpeg?auth_key=1789360074-0-0-37abb1f6d72096f0974ebf9cc4baddd2","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.312Z","timestamp":1789355031312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091217055888266.jpeg?auth_key=1789360074-0-0-37abb1f6d72096f0974ebf9cc4baddd2 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:51 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 66096\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 09:06:03 GMT\r\nETag: \"4f2dfe3eb5d06051a562ca7310f70a75\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[210],EU-GER-frankfurt-GLOBAL1-CACHE1[205,TCP_MISS,207],1.1 a823be133adad65df6d3bf471a742792.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 189579350c297319748eb994440d264a\r\nnginx-hit: 1\r\nAge: 148974\r\nX-CCDN-Expires: 2443036\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":66096,"size_decoded":66999,"mime_type":"binary/octet-stream","magic":"data","md5":"4f2dfe3eb5d06051a562ca7310f70a75","sha1":"bbb2b93f490361827117975a91e5d404c6c3e972","sha256":"66365e2dedbe43311c3cd965fa44049acb3d6810aab4ca8452fc26a620ab4962","sha512":"f3430fa8adc4b2ce884d9e70b2c770c1704afcfd115d28a000e432cb75d27d0199a721db48e427c50558e7616f2159baad60fa451df846d08cc653923e080039","ssdeep":"1536:6nOLoujb904ZPLGsc/jaAxFGNZ1rOgj9MsfoPNMs5OQBk/4Xy7:3bzPCjv/iZrZMxNd5OQBkgXI","tlshash":"7b5301fcfbb9d25bba08d9d4c1e047ce361fa50ab5492b97f6502c6c35bca34a027215","first_seen":"2026-09-12T23:27:37.714863Z","last_seen":"2026-09-14T03:04:37.979211Z","times_seen":3,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":450,"connect":49,"send":0,"wait":96,"receive":68,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-31/774eadd60f5145ce75ed32cbb159b8be.gif?auth_key=1789360108-0-0-013ccad19415d966123aaa0850170ebf","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.353Z","timestamp":1789355031353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-31/774eadd60f5145ce75ed32cbb159b8be.gif?auth_key=1789360108-0-0-013ccad19415d966123aaa0850170ebf HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 47552\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Mon, 31 Aug 2026 04:52:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"291596e4327ee428d8e43a5088756faa\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE7[14],EU-GER-frankfurt-GLOBAL1-CACHE10[10,TCP_MISS,14],1.1 bb3ac1595bb014e3b09608a0358d33da.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 122fb3644e727e1968e1fcfe33faf298\r\nnginx-hit: 1\r\nAge: 828118\r\nX-CCDN-Expires: 1765837\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47552,"size_decoded":48452,"mime_type":"binary/octet-stream","magic":"data","md5":"291596e4327ee428d8e43a5088756faa","sha1":"043953d9554fed9a79d969fb4209aa2a697c0ba9","sha256":"e5a9d0bddc46ba12b4891fcf8cde960a68f80063508f7bdfb9bccf150410844b","sha512":"f06ad617a4a8791bf456dd2461d0cf6885ade133b9d6e4549a9d4a78abe20ddda716c4bb95514d18790e140d84fa1b987c136f5ac14a222611af55a6a6edf947","ssdeep":"768:mqKBlJQFUxYpweDHin2gsAfG3roNDB/Jtt9qh5Xo/T5FXKJRk0fDyZbfH8n+bXrl:m3BahmeDCnuAfG7ABRPU0TeRkGyZjHXd","tlshash":"9323f2a168ccb04ada3c47fa46064ab27a68c464896ce7e3af523cdd50245c67fdf1dc","first_seen":"2026-09-06T03:54:00.859434Z","last_seen":"2026-09-14T03:04:37.980882Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":1114,"dns":0,"connect":0,"send":0,"wait":54,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-31/ee2285bc52e7a7dca3f05b9fd8e8df72.gif?auth_key=1789360108-0-0-88a427b6616a5abb565be8c683c7ea4d","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.357Z","timestamp":1789355031357,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-31/ee2285bc52e7a7dca3f05b9fd8e8df72.gif?auth_key=1789360108-0-0-88a427b6616a5abb565be8c683c7ea4d HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 231936\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Mon, 31 Aug 2026 10:54:50 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"72ebd4fa48f68da33ea7f883ff3ca861\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[2],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[23],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,21],1.1 88f858f045c3909fad9cebbada511aee.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764044\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 077b57395bda183041696a9278ce0113\r\nnginx-hit: 1\r\nAge: 827959\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":231936,"size_decoded":232836,"mime_type":"binary/octet-stream","magic":"data","md5":"72ebd4fa48f68da33ea7f883ff3ca861","sha1":"f667271aa29abbae9877798a987f34b2bf2cd7b6","sha256":"03f0fcbf3f412ae5eeb9ce6be142d737754b6f1be13c3c3f933de9c2e6ccc25e","sha512":"fa20ad046a5c06cdb707565877e7029985e582a0d96316bb147f8a438e341897217b5437866df53c475911b016e4d12201e6521ef16ab53cde7586c85729ab9d","ssdeep":"3072:8EfGlYTuLHsCAwcg7YTD5Fpe0y0LukpjqToccptlW8Yb3OPz9Oy2Zh2xbS2ITOV:7zTIAlFFpe01qAGTopflWIx/CkITOV","tlshash":"1b3422790bd55d35a1916c02abbfbdff98e20206a5a3e7f0657b721e643b2c4fa01113","first_seen":"2026-06-08T12:56:11.672261Z","last_seen":"2026-09-14T03:04:37.981582Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":1172,"dns":0,"connect":0,"send":0,"wait":51,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/pwa_icon.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.810Z","timestamp":1789355029810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/pwa_icon.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 5171\r\nserver: nginx/1.22.1\r\nx-request-id: a7aa90795e73c0506aa629a2\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: \"6a0822d2-1433\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: QPzaZA-MiE0oHP1qoIvhtsblD_Cj93drVtBoG0UXFsoTyPIFoHCdWA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5171,"size_decoded":5669,"mime_type":"image/png","magic":"PNG image data, 300 x 303, 8-bit colormap, non-interlaced","md5":"4d62ba72357f3429e7c2da50bc94ce50","sha1":"4410ebab7078a58bdd8efc7464cab8dbee667aa0","sha256":"91025c8074450642a272fc48bcf9d0ceb1ad566c4cc04a7304eaee952af7efcc","sha512":"2e292ffa754f1cc5390b54d858f51e3fba905823f7a7db69e5954e3ff16e2b6fbde1b8a09288235cce287f30ca370262a2789e1e01c88ba7916338c7bb299e11","ssdeep":"96:Q7XxXO5J5oPE+vi0wQM+qAA7vB02ubLPaTWVOkoa5Km6YtscBiwDzM:m87YLayMIAjcPCSVOkxKmTtsciV","tlshash":"d9b16e54ccd0b06d0e0f6e78fa4e637b1978827d16598fb03c1e5c27540ff164981b89","first_seen":"2025-04-21T03:33:27.082265Z","last_seen":"2026-09-14T03:04:37.98227Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/web_tracker_v18.js?v=1.0.1.4","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.785Z","timestamp":1789355029785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/web_tracker_v18.js?v=1.0.1.4 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 30657\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: c0bf564904aa5b646aa62999\r\naccept-ranges: bytes\r\nlast-modified: Fri, 07 Aug 2026 02:20:59 GMT\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: W/\"6a754100-12d18\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Xg0IWVVduEGzmLUZqLiCfnDGvB65ep9bdAFDv1ovITT_KyH4mqOwQg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":77080,"size_decoded":31196,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65496), with no line terminators","md5":"056c8667570a5143252775bebb16e1d7","sha1":"0215756f4e10f6e66da27a71e80d9c945c50bfed","sha256":"4b1c67a73da3a5c22be38d581837033329283129976f4f8bfbe557843d22bec6","sha512":"3f21c50d15455ed8cade543c1cbcf71bdcec50e1be8864ca379ecdbdd2fc5a78bf68cf5c7f2d2971735ffef837a5b0872c2954e1cb4f87c14fb217fb8a9d8970","ssdeep":"1536:m8og8MQM0BbX4tMx+V+mMZoqRJUeuQV1nNh:H89iM5VnP","tlshash":"b77394443be0b89523d75b7b3b1bb5e5f85f1caa6848044be201fc94f5a1716eae0b34","first_seen":"2026-08-08T17:20:34.96195Z","last_seen":"2026-09-14T03:04:37.986901Z","times_seen":32,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/default.jpeg","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.798Z","timestamp":1789355029798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/default.jpeg HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 1269\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 81311c6803af34cf6aa76415\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\netag: \"6a1a94d6-4f5\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: bLyJ25H77wVI8SF9AdDhhSgiLAz0CQsTTaybBvXkg-PQ903DqBHb5g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1269,"size_decoded":1761,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"4727ce8fb9a35dfd3ef084ced7509347","sha1":"27366e48e2791ab12ef1267091f39240874bd05d","sha256":"a48e4d22468b9604231c2f2dbdd027d7328131105c3f2988df1e6ad2ee1d6cd8","sha512":"85e1147c54719dd22bd26c5525cea05221f6b714ee3d3494c5959210d36c3dbae44f8758c733aeafc1d60d8cba8b90f1a9507ae8c961c3a526329630ee1a5189","ssdeep":"","tlshash":"e62174c25d026499f8339b3302911e206300b553795a4e8ff76f7a066bb8fa221c4096","first_seen":"2024-11-17T05:55:40.918759Z","last_seen":"2026-09-14T03:04:38.00105Z","times_seen":1147,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/search/sr-1.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.802Z","timestamp":1789355029802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/search/sr-1.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1626\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 607b205cb43d77156aa76415\r\nlast-modified: Sat, 16 May 2026 07:54:06 GMT\r\naccept-ranges: bytes\r\netag: \"6a08229e-65a\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: cAuFYte3SVj3sWCoW-MCTd6as8S1JRHL9SUmOAbtDASGOxRs-SjlBg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":2117,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"cc0277b8510de28a857ec77c5941e036","sha1":"a18a09af6baa9eca4f0dbf649b9076d3501ed6ef","sha256":"8232402cfcf925e7c7b27150616d2d7d54502d5d06bb3322e3454fc497e487dd","sha512":"b3b0b6d885316ff59888fd74e2ac1e9f1a0baf76c32067c7ad9e49a693bae3173e99f1f6e38715f02a3244eebf1195c541b4b8771507b1bd22719de871c6d156","ssdeep":"","tlshash":"a0310a67d00f9f5fbb904a66060482d28626afb717210f1e41c0e506960d753e8a417b","first_seen":"2026-01-12T23:00:02.096742Z","last_seen":"2026-09-14T03:04:38.007045Z","times_seen":646,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/jquery.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.646Z","timestamp":1789355030646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/jquery.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 35749\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: ccda3ac3eb6236456aa76416\r\naccept-ranges: bytes\r\nlast-modified: Sat, 16 May 2026 07:54:06 GMT\r\netag: W/\"6a08229e-155ec\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: M-MXFZRZfgOKsVTv-RUC5jDsR4jpMAi8Jqs_QX88vXsH14NZ0C3a2Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":87532,"size_decoded":36282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-14T03:04:38.013845Z","times_seen":31906,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.255.198.114/api/eventTracking/batchReport.json","fqdn":"54.255.198.114","domain":"54.255.198.114","tld":""},"ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.304Z","timestamp":1789355031304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.255.198.114","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A8:42:07:A5:78:06:03:7A:7F:86:58:26:5C:3B:99:86:DB:4E:BF:A4","sha256":"0F:D2:5B:64:F6:93:3A:92:F0:2B:8F:0A:BE:66:3C:40:D1:D4:4E:21:AE:B6:3A:A6:14:AA:9F:86:2A:A6:B3:3E"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.255.198.114\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 8115\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8115,"data":"[{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2080947717715881985\",\"creative_id\":\"2080947717715881985\",\"ad_type\":\"1\"},\"event_id\":\"d40c0c73b2a903e998eaec5a3729f1ce\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"bee60c7d8c842bbc42e4ae367e3d7dab74ad284bf3637ca1c73f3a1ff6c9ceb8\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"DX-065-530\",\"creative_id\":\"DX-065-530\",\"ad_type\":\"1\"},\"event_id\":\"a15fc12049cdd9a9bbccd5aac1e379bb\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"e7e84cf13c0b71972777f7c9be457ccbef790f4818bc5384b4972bd132cde84d\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"DX-065-183\",\"creative_id\":\"DX-065-183\",\"ad_type\":\"1\"},\"event_id\":\"83794f9a088033477d5d0f65f5d84f53\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"47a924b32c8feed360285d6cd72ac20e968c805b1374a7cb60c884d8112b84bb\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2093951422492860423\",\"creative_id\":\"2093951422492860423\",\"ad_type\":\"1\"},\"event_id\":\"a47dda25b06db473a691ab8a08a944ae\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"7c64015691b9ece805dea7efd4152f9bb84c5983318c3ca7eab0a61d8a40d2a8\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"1999329546894868481\",\"creative_id\":\"1999329546894868481\",\"ad_type\":\"1\"},\"event_id\":\"8ba42c8a9554dce4c815cde7fd6f0b5e\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"d4c5941bf2f77e653b4989dac18ec92ae0a4dd81212b82ab0988b82efcb76dcc\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2072959851316449280\",\"creative_id\":\"2072959851316449280\",\"ad_type\":\"1\"},\"event_id\":\"0b984dc28b0c3b90d6f8659401124dae\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"fc6a1f3a3d7c0ac5f3b714f1bdcfd3676439bb04f846d07af5b76acbf1b7ed1f\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2078795228371554305\",\"creative_id\":\"2078795228371554305\",\"ad_type\":\"1\"},\"event_id\":\"87b4a80c10565ab964114e4f2ddc2e4e\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"2af31bf248171fc01ec6d64c1a9de0aa62cb406b859cefc3aca3998f465a958b\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2013600386503159816\",\"creative_id\":\"2013600386503159816\",\"ad_type\":\"1\"},\"event_id\":\"7b37d36f8cedfe08d53a00337f17c624\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"fafc3e96ea7a5f69ac4685760edc6ae5d27739663980a5928aefe9cda067187e\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2097539563145465857\",\"creative_id\":\"2097539563145465857\",\"ad_type\":\"1\"},\"event_id\":\"30956d5726961a59699f6d4565cb450b\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"99a300fcdb3fb0fb09a0bdf9f1375c9efc84d59b25d89ccd23e77e44ac63cc9e\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2094431903701295129\",\"creative_id\":\"2094431903701295129\",\"ad_type\":\"1\"},\"event_id\":\"96442189b462956760de5693b19677d6\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"e8aa12c1d6b82774621a442e6f9fd28df54e1ddff66812f20fd861910aa04cdf\"}]"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":423,"mime_type":"application/json","magic":"JSON text data","md5":"0ab94d0fc1ecb3477a682ada19ad817d","sha1":"e6311ec9ae74beb1f7461c0ae5e81c8f835e0f3a","sha256":"7f86129f0513b8495b7ecf4f1414314df859f22b58b45b9036f4d9e48df30074","sha512":"d2da24f6eda58fd1fa39d5f154744ec618de7a1f431f149104d745db588c59b65ce10f819cc611a7241aa1470d3053c3d69ca57709becdf95e54556d4f4789bb","ssdeep":"","tlshash":"a4800433141c04430501354c00053f04105c11534f100771cc5c4715c75c074f151410","first_seen":"2023-08-16T08:22:40Z","last_seen":"2026-09-14T03:04:37.965385Z","times_seen":8352,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091212144315094.jpeg?auth_key=1789360074-0-0-80710473b83b06d9643533b70c1a5bf6","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.315Z","timestamp":1789355031315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091212144315094.jpeg?auth_key=1789360074-0-0-80710473b83b06d9643533b70c1a5bf6 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 199728\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 04:14:49 GMT\r\nETag: \"bf6cf20bebd45109596d5dd3afe4090c\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[3],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE6[17],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,17],1.1 94328d2509009edc0657f5c786a93e42.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nVary: Origin\r\nX-CCDN-Expires: 2425959\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 54a9f89b1070b1c44ab7fe2749859b20\r\nAccess-Control-Allow-Origin: *\r\nnginx-hit: 1\r\nAge: 166041\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":199728,"size_decoded":200642,"mime_type":"binary/octet-stream","magic":"data","md5":"bf6cf20bebd45109596d5dd3afe4090c","sha1":"386d424240ca7a701964fbda200da8f9f29b4190","sha256":"97cb3550d67fd0ae3746c62e9d98e2479fb59bf4feda93ee449686111719f81b","sha512":"eabd1573c296bf5ca5779cf771f2c0d7fc3282f687fc58617fb4922910d8ba85a4bdb565d26cf0f43c0e50e4f371140c64ae3aeedfb0db17747d85b9b41b7701","ssdeep":"6144:926aYS7ua9EHO/kSlmYuiIdo/tAHttiF8LGHx:926aRSa9EHO/kSliMANwmKR","tlshash":"f514223488573a6966ea367cd2340eea008ecdbad7b163f77bd6c2c8915d43d6c60b14","first_seen":"2026-09-12T09:44:15.088915Z","last_seen":"2026-09-14T03:04:38.015851Z","times_seen":4,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":862,"dns":0,"connect":0,"send":0,"wait":52,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/60fbdd849d24658b9beea2e75bab5b90.gif?auth_key=1789360108-0-0-8d51ec50b46c7ad4c69788aa97080ab1","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.337Z","timestamp":1789355031337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/60fbdd849d24658b9beea2e75bab5b90.gif?auth_key=1789360108-0-0-8d51ec50b46c7ad4c69788aa97080ab1 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 16080\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:08:00 GMT\r\nETag: \"e98d98601f5b8dfac2e3df6d3bda453c\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[14],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,14],1.1 8a6f67a9421de326f43e9107751b580e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2369366\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 1b6dec620d4206bf1b560f490299d970\r\nnginx-hit: 1\r\nAge: 222882\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16080,"size_decoded":16979,"mime_type":"binary/octet-stream","magic":"PGP Secret Sub-key -","md5":"e98d98601f5b8dfac2e3df6d3bda453c","sha1":"1cf7214c8654d6d3b99a1894c1739094e41fa84d","sha256":"2dbef81b08167ab4d074fa87a8396f46ff72b8a70a7eb3ad945747c1d3dbcc42","sha512":"49084d19c9e2b4b536d2a949e2bea22c3e487c55bda4cab5da8eab335b8f651b5fee8e717720b4ce49245e33a434600c7c7ef288814a30f3d50f11915f0ef8d4","ssdeep":"192:1S/VDF5iRfgZd8JR01MaUUTZ3qmsYIPNMTglJI9PAgBo2BHObSzs5rQkpil5EWw:1SdXZd8JRpa5ZYY8+MIx22Bns583w","tlshash":"2472d02799f235818646ab4847cf835fe8166ed96c43fd2bcf4430e0c0507fa0d9899e","first_seen":"2026-09-12T09:44:15.095044Z","last_seen":"2026-09-14T03:04:38.01765Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":1013,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/css/lib/zui.css?v=1.0.1.32","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.770Z","timestamp":1789355029770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/css/lib/zui.css?v=1.0.1.32 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 7468\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: 5221883497e451546aa71fd3\r\naccept-ranges: bytes\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: W/\"6a08229e-70f4\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 2OSduuWZAPe-504yAp9_So2I423qnjQ_BtcUuOKH7XWXhmfnz0cTjQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28916,"size_decoded":7991,"mime_type":"text/css","magic":"ASCII text, with very long lines (28916), with no line terminators","md5":"4deca8ba6c70fa7d6aec9d3541a56d78","sha1":"a1f3280d1ba6bea15a44987d82467b293d7af829","sha256":"0644afa3903975314b3bb37233f7cb61e47d9787837b8de36b79d2b7dbc5f66c","sha512":"1be1f7607257973863a783f2fd346baffa4587d8dbdb76bf910866cd1ab9cee2d6596062bf6274918240dbfaa0025e72e0c231e3098230b737887c41501db6ed","ssdeep":"384:v9rqNX1DiSjYXsSMNGTwHrNsdFsQNQJsY/KMR6kuY+R+kqguRg:4cR1HY+R+kqLRg","tlshash":"91d2c729a524212d747fca5db1c0eeca62118423d6631bfbf566693cc7ce9c96733b08","first_seen":"2024-11-17T05:55:40.987624Z","last_seen":"2026-09-14T03:04:38.019025Z","times_seen":1084,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/web-sdk-v1.1.8.js?v=1.0.1.4","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.782Z","timestamp":1789355029782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/web-sdk-v1.1.8.js?v=1.0.1.4 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 38965\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: c1e5c304c498e3056aa76415\r\naccept-ranges: bytes\r\nlast-modified: Fri, 07 Aug 2026 02:20:50 GMT\r\netag: W/\"6a754102-1a555\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: XoC6iyPCkYj3A1hEQst37vWteN1xHiY9AOx7jh0iO3FwPAMss3ZWKQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107861,"size_decoded":39498,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65321), with no line terminators","md5":"407da8b2b5bfc63458e9a336b0a04df2","sha1":"8dad96c8eac3205de1a7f6fdeffe8621d85055dd","sha256":"fea25103704c04ece90b0d66031808d114ad3db9ee38a83a25cb659c22658be4","sha512":"028ff566de85363f4dbcc3a4523da1a14fb923a30eed603ad75333b0175d929a3b6693e6980f1fc4064b503bc7b1134ef580c1da8aaf937646a3e1ea79324cb2","ssdeep":"1536:NFKGI48OZ/EgQ4F4WZViFeTzzR70hCzR7UKVhyzZzSL2+vS9T7d4:NBI8F4WZEhCzRBVhy1oM7W","tlshash":"00b3f989f6a2b02251a71176b03f450ba33b196b2d4d0054f364ade87c7d68ed37aedc","first_seen":"2026-08-08T17:20:34.923053Z","last_seen":"2026-09-14T03:04:38.01989Z","times_seen":35,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-10/916685632955337b4fe6c082d1759862.gif?auth_key=1789360108-0-0-a0277c421156aa523330366adbd282d2","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.348Z","timestamp":1789355031348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-10/916685632955337b4fe6c082d1759862.gif?auth_key=1789360108-0-0-a0277c421156aa523330366adbd282d2 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 148944\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Thu, 10 Sep 2026 04:06:37 GMT\r\nETag: \"b889b0a2c6745c8bf74b1b903ea2c6ab\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[1],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[18],EU-GER-frankfurt-GLOBAL1-CACHE11[0,TCP_HIT,16],1.1 30e954298424aa69c035e25834574742.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2250625\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 7e378e6f1f27504a4224a2684ae76720\r\nnginx-hit: 1\r\nAge: 341574\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":148944,"size_decoded":149844,"mime_type":"binary/octet-stream","magic":"data","md5":"b889b0a2c6745c8bf74b1b903ea2c6ab","sha1":"e6720f2b9b2cfe782afa07f58504cc79292a8f19","sha256":"a6cdb4d0910b15ec11245f9292739cc0e52bdb4b27e19f703e0ac533b9eaadd4","sha512":"b7c60a12dc9739d2dacae85a0029588b7325fa3fa1c0293c414c72f9195b770a6dfcc8b83fce666ebb6ad97a8cfc49a74499e7c5e27012b6b95eb14aeea8f190","ssdeep":"3072:R5m8BWYUa8xWDlx4Y9qudX0z/M7gEJ+Bi7OZ0yCIwvyIBhcwitMuZ8S:R48BWYUa8xOljXX0z/a7J+BIWZCIw6Iy","tlshash":"dce32314b534ae60dc106dbc4d2c7230bd1b997293e98b60b9c7181994bfcfa1bfad25","first_seen":"2026-07-02T07:52:11.303469Z","last_seen":"2026-09-14T03:04:38.020744Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":1091,"dns":0,"connect":0,"send":0,"wait":52,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/48ad01a6b0d1c0edabe485b652b2c0bc.gif?auth_key=1789360108-0-0-544b62deeee17efa7cdcd63ec7cac13a","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.352Z","timestamp":1789355031352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/48ad01a6b0d1c0edabe485b652b2c0bc.gif?auth_key=1789360108-0-0-544b62deeee17efa7cdcd63ec7cac13a HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 46176\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"cb88310edc3b646c9495156e1df422c4\"\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[1],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[2],EU-GER-frankfurt-GLOBAL1-CACHE6[0,TCP_HIT,0],1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 2cd991533994e92c0e6d0349204caf72\r\nnginx-hit: 1\r\nAge: 828119\r\nX-CCDN-Expires: 1765836\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":46176,"size_decoded":47073,"mime_type":"binary/octet-stream","magic":"data","md5":"cb88310edc3b646c9495156e1df422c4","sha1":"a6c0a492d90f3fa95cc6adf66a6ea57a19bcb461","sha256":"ed54bb99fc05fe5226ac830e99948041d2ef0731c8c1f30ce8d7f504edaf875a","sha512":"95158199816859042eef4281b69be17211d596dce07895ac187256814f5530ed295769ccbbde9d349de692e037234f20ec38774e6fc99139afae5df882e4166e","ssdeep":"768:8iLkl+0StxIcKR5IDOaiSYxD/BE/6poTYda8QNxX4KD6vh7Fhci0WS8MD6/:XLkrQEI2SYzK6pPkNxXV6xFhhVMD6/","tlshash":"e52302649c8e6dae785cfc4c2d3c8807ab291123a55e0a1fe4295f2a3f49dd2904c399","first_seen":"2026-09-06T03:54:00.934805Z","last_seen":"2026-09-14T03:04:38.021695Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":55,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/348458dbb2a3b6d543f95f3fcd8daa47.gif?auth_key=1789360108-0-0-b9fa6e3f467a9f55467d1f21cf040a6a","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.354Z","timestamp":1789355031354,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/348458dbb2a3b6d543f95f3fcd8daa47.gif?auth_key=1789360108-0-0-b9fa6e3f467a9f55467d1f21cf040a6a HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 43568\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"c7d9995345eff8134e30e3552a03f346\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[8],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,6],1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764044\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 4fb07f4e4871a3520ffba12e000b87ec\r\nnginx-hit: 1\r\nAge: 827959\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":43568,"size_decoded":44464,"mime_type":"binary/octet-stream","magic":"data","md5":"c7d9995345eff8134e30e3552a03f346","sha1":"9f400182eb5e927325827295def3525a98ce0ae7","sha256":"eaaf1b01fcc5031925c576226d2159de5ecb1f6c9da1c113eecf8554f1a98883","sha512":"3ef0bd7a7525385d62d1696ea27aa1175799b830556448cded4952efe93e625d65fb0bfee846505b4cdcaccd8ee89418555cdd330609091532b023d718983006","ssdeep":"768:sDVvcjOJVCJvR9g7QuSt0Ob6XaCA5aHVignheOborDPLZVVN:1Q0p96Q0m6xVignQPZVVN","tlshash":"27130189be3ab4e6d994221fcc96ee41dc1508be5b079c12f8dab790a27c1dd407237d","first_seen":"2026-01-24T20:12:13.020628Z","last_seen":"2026-09-14T03:04:38.023694Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":1122,"dns":0,"connect":0,"send":0,"wait":57,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/css/lib/swiper.css","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.285Z","timestamp":1789355036285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/css/lib/swiper.css HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6374\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:55 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 4c37c799ae42e34e6aa7641c\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 May 2026 10:47:19 GMT\r\netag: W/\"69fc6db7-48cd\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: JXEll2GZg59xS_hOjh96acm3-_jCFZ7S5pCkeroZ44pFq2rvsuESkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18637,"size_decoded":6891,"mime_type":"text/css","magic":"ASCII text, with very long lines (2308)","md5":"4eabbbaaa0e2a89b61d96e961b17a811","sha1":"a98aa81a66f1c2bda98296f44cb5dbe9fd76e896","sha256":"15f307c7b4bc77f326c823c4a28aaa34cb209111dbf968e094c14abdf8a80f07","sha512":"80f10d908bbd35d72b2edc4fba8a757ad53f3b10d2cf569f984810ab63a275141f352dba668e3494ce9dba3573f09a83e7d2e336c90c06c4f812083d691254b1","ssdeep":"192:WMZmUJbiKne/9tFpESUe+He5CgYZiNdPH/34GZzsL1zdCf4DvA+fi1freisetsBm:vEUbe/97pEK++8sNV4Oyl8fasqvC","tlshash":"588211a453901c27572b2f360ea14bf9dbb444d60b93896a53c0ed44e7f6cbd132f1aa","first_seen":"2024-12-01T05:50:33.440606Z","last_seen":"2026-09-14T03:04:38.025847Z","times_seen":1007,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/44d777f9d44888a8d1b16f1220df69f9.gif?auth_key=1789360108-0-0-f9179412bd1f9122ff724969e90bd057","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.628Z","timestamp":1789355036628,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/44d777f9d44888a8d1b16f1220df69f9.gif?auth_key=1789360108-0-0-f9179412bd1f9122ff724969e90bd057 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:56 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 548064\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:10:28 GMT\r\nETag: \"f08fd8cb6503485a1989e105fecf6936\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[1],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE3[654],EU-GER-frankfurt-GLOBAL1-CACHE3[521,TCP_MISS,654],1.1 f8f9f25f837c0ce4e62b6d917642b56a.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 046d74d4178f9ada68d2eb0a7f6b1416\r\nnginx-hit: 1\r\nAge: 222791\r\nX-CCDN-Expires: 2369296\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548064,"size_decoded":548968,"mime_type":"binary/octet-stream","magic":"data","md5":"f08fd8cb6503485a1989e105fecf6936","sha1":"7f22681c7d1e1344c9836bd8ee166572d78917d6","sha256":"b1bd29ac33f7273978c1140dd67ec2692fabfe1901dc6452a25e3ec8def2feaa","sha512":"c0b8e2f8737acb46491e874c194b54fc2209f942eeca88f03ab33ee6764f259eb2308d02a9c291758bb5e966326b4031d9dab31b9b97364b1670632046a139d9","ssdeep":"12288:VKS3OzaKV9V69mkxTG2RzqbwBC8f+i20b8D7KPmHO:53OxVe4kpXubwU8LbY7HO","tlshash":"fdc4230f64eea52bea5a591b31cb9c20fcaff1f2e5e16940cc37117f614865952b01bc","first_seen":"2026-09-12T09:44:15.102364Z","last_seen":"2026-09-14T03:04:38.028135Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-02/cafed57b1141fe1856bea8c46451d5c3.gif?auth_key=1789360108-0-0-9530a0f2b70455f1ace007af90136d9e","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.632Z","timestamp":1789355036632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-02/cafed57b1141fe1856bea8c46451d5c3.gif?auth_key=1789360108-0-0-9530a0f2b70455f1ace007af90136d9e HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:56 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 390720\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 02 Sep 2026 11:15:10 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"a7387d7ce6b27638fd6403d39f5b6160\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[2],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,0],1.1 34fdfb7c7c11559df7e622af2b62f5ca.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 0b0b7de049f2036f5f817c6805f6804d\r\nnginx-hit: 1\r\nAge: 827510\r\nX-CCDN-Expires: 1764577\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":390720,"size_decoded":391618,"mime_type":"binary/octet-stream","magic":"data","md5":"a7387d7ce6b27638fd6403d39f5b6160","sha1":"dbfc2c29adb25e5d6909ca4d581188a144400447","sha256":"de5bd659b56a0c2afeba059abd3454e1202eba6c71df5a057e4381f4104922c7","sha512":"bf112dd08d75e34dbaac4a9abeeb881057cd5daa1c7513bc16351b4866c856472aed508bd25508b8660ddf5ddcd18ebac32ef344bbac8fea13a6604462ca7fd1","ssdeep":"6144:bhKrx6B0Qsj4QtIFKzk9m/cruVlqHg2hYT0eCrdp8ugrRNzNsR7pglZhfhuJ9AdH:b8rxGps3Y8/g9YTmJp8ugrxsR7SLlcJu","tlshash":"d58423fae40819f783c494a8fcb4ba976770e71704d45cef3e9c442682c69734ea9939","first_seen":"2026-09-06T03:54:00.974012Z","last_seen":"2026-09-14T03:04:38.03108Z","times_seen":9,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"52.77.210.85/api/eventTracking/batchReport.json","fqdn":"52.77.210.85","domain":"52.77.210.85","tld":""},"ip":{"addr":"52.77.210.85","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.554Z","timestamp":1789355030554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"52.77.210.85","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:9D:F7:EA:7A:E7:D2:66:30:85:65:FB:53:0A:5E:BC:5B:60:F2:07","sha256":"74:DD:F9:33:22:22:7C:0E:7E:26:63:F1:78:FD:5C:76:50:29:19:49:19:2C:F9:4A:58:D3:B6:51:D3:A5:7B:D1"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 52.77.210.85\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":184,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/logo@3x.webp","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.795Z","timestamp":1789355029795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/logo@3x.webp HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 69319\r\nserver: nginx/1.22.1\r\nx-request-id: 489d78f1883aa19e6aa62764\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: \"6a0822d1-10ec7\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 4-Q_Cu5WMNRoMoudslFJS9ENIx6klGTtsnmR4dmEDCQuqmScUxblNA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69319,"size_decoded":69820,"mime_type":"image/webp","magic":"PNG image data, 672 x 90, 8-bit/color RGBA, non-interlaced","md5":"e6e64217ade8d5245c0577d056861e4a","sha1":"c75cf8b6b524c6cb156f501fee5f7f17628e5fb6","sha256":"06b253fcb40bdc80894f4e8f3c9e13da9b30f1cf3fbf4f88394ca7a57eb10760","sha512":"40d5fdfe900f54e22e61dfa0d6f0e6da04fce81d10dea91b49b1e6eaa19b8bff6c6190ee554b7520b07e8abdda0652b3ef4ed1c89446c285e661c2ee1892f75f","ssdeep":"768:yc5WYUFll1I90cL2YdUiycBQkfLRfLvju50OJVMkoLQSfnCfa7+ko9Zl7ntqYCGs:eFX1H7iv1PW0MufnCO+kG9n4Ebw7Vu2","tlshash":"db6302d2711e540b6c9f92251e7b688903fc7086b9675b95686fc389f4cb10faca338d","first_seen":"2026-04-19T12:40:25.998805Z","last_seen":"2026-09-14T03:04:38.032962Z","times_seen":169,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/sj.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.797Z","timestamp":1789355029797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/sj.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 222\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 34d801d904f3f11b6aa76415\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\naccept-ranges: bytes\r\netag: \"69fc0d6e-de\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: VR0Bu2sE8zPcysYunbIy_iFdFqGu1hqxxNa2REJGwnIPsAF3VkGT5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":222,"size_decoded":711,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"9843f5e77a96a951a37f541efac9ec11","sha1":"a3293c750f72fa23b42beba1cd0335edd144247b","sha256":"fd78d7addd53ba8f82d068c0c601cf2dadb85ee259fcbdcdf58666ef48d4fe32","sha512":"3bbb2c7a904dd521b9374a15b4834947891c34f5de5d9d641b30b2d84a6f992e38c74a447235864215766af9bbf2781fac813a84a6b908ad744b9eed8787eda6","ssdeep":"","tlshash":"3cd023c5334c55fda70cd967c25f943c553f175d570310088d6414157515a5d45db1d3","first_seen":"2026-01-12T23:00:02.091965Z","last_seen":"2026-09-14T03:04:38.033711Z","times_seen":644,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"56.10.62.34/api/eventTracking/batchReport.json","fqdn":"56.10.62.34","domain":"56.10.62.34","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.546Z","timestamp":1789355030546,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"56.10.62.34","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:46:91:3E:5B:4D:87:93:92:19:76:24:04:70:DE:45:6F:53:D1:37","sha256":"E9:A2:D8:0E:AA:B7:5B:51:23:8D:09:B5:C0:06:A6:E8:00:0B:3A:D4:44:A4:69:A5:25:A5:9A:C1:10:3D:59:88"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 56.10.62.34\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"47.128.222.54/api/eventTracking/batchReport.json","fqdn":"47.128.222.54","domain":"47.128.222.54","tld":""},"ip":{"addr":"47.128.222.54","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.547Z","timestamp":1789355030547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"47.128.222.54","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:38:B7:95:24:CA:59:0F:33:72:29:53:6A:3C:D4:EE:34:41:75:71","sha256":"13:DF:EA:24:63:50:38:94:EC:85:F2:60:2F:7E:82:ED:93:84:B1:C1:72:C9:F5:55:F6:FB:D6:DD:D6:3F:8C:EF"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 47.128.222.54\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":183,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"52.77.210.85/api/eventTracking/batchReport.json","fqdn":"52.77.210.85","domain":"52.77.210.85","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.549Z","timestamp":1789355030549,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"52.77.210.85","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:9D:F7:EA:7A:E7:D2:66:30:85:65:FB:53:0A:5E:BC:5B:60:F2:07","sha256":"74:DD:F9:33:22:22:7C:0E:7E:26:63:F1:78:FD:5C:76:50:29:19:49:19:2C:F9:4A:58:D3:B6:51:D3:A5:7B:D1"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 52.77.210.85\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/warn.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.915Z","timestamp":1789355030915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/warn.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 52\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\nx-request-id: e69887b8d0b23c226aa76417\r\nlast-modified: Thu, 07 May 2026 10:47:19 GMT\r\naccept-ranges: bytes\r\netag: \"69fc6db7-34\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: TI3ix-XgtiiRj3i3gQ4FFlo5i1UwWPl1qNTR2CPLKaJPbLkbjhExZA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":52,"size_decoded":553,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"48e1a6ea23cc4d1a788c029c806f0e1f","sha1":"142417ef6c345202dce4f6529940efb99d206aba","sha256":"d199a1d14c9d23cc629f5f9099c0e388ada82b946fe5a9831157b30bcc1978db","sha512":"3437f60e4311b1cf3e8dbffaacd20b636e81bb39d842d61b18ff24f2df351e718f44ed868c3d1bb4c3d70aab6c75db2b72097dd51d0bce7f16a8e400c8d86005","ssdeep":"","tlshash":"819002281dad9248057721d4581b994995517430124b20514edca0504d5893c022b709","first_seen":"2026-01-06T16:02:35.221023Z","last_seen":"2026-09-14T03:04:38.035525Z","times_seen":627,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/91short-icon.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.799Z","timestamp":1789355029799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/91short-icon.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 581\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 1450d5c6718cc8b76aa76415\r\nlast-modified: Tue, 14 Jul 2026 04:37:18 GMT\r\naccept-ranges: bytes\r\netag: \"6a55bcfe-245\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: r3Ayyk-BqqJEq5p40IS2OFFBo6shYfKJDQpjghV7qevC72b8DpM9QA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":581,"size_decoded":1071,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"9b3b12751eda6d7183b05b2e0b7a866f","sha1":"396c6a8dd3df164d7a7c7f66678542c9cb61527d","sha256":"16373a4b4fa1d63c49a41ca91d57b0c0f96ccd5c5b0ddd7af4e25a1be34d8d13","sha512":"ec677311963fa66e8372819b4b561f896cad09fe1d482b1f43093b6f3358965f4bf22a574aeb111e85d9a9845789ff4b73298398468e0ffe62824cf0f093eaea","ssdeep":"","tlshash":"e5f04182b2d17f10df612c313a0ed19e9933b2873a0025684b2e40259d8366cf2d8bd3","first_seen":"2026-07-16T03:06:17.909342Z","last_seen":"2026-09-14T03:04:38.03698Z","times_seen":44,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/h5-ss.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.801Z","timestamp":1789355029801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/h5-ss.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 396\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 4e4f17c10b91a0b66aa76415\r\nlast-modified: Sat, 16 May 2026 07:54:57 GMT\r\naccept-ranges: bytes\r\netag: \"6a0822d1-18c\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: jisUmHeYc5sDP7a3JYZcdlmSeIXV0AsUz0cQujSLZZocU045RrcMoQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":396,"size_decoded":886,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1b9fe300ca004735c072c090a43395d7","sha1":"9aeb410943c32ef31bc107c32a0594b61c6dccec","sha256":"113a371d6067cff83d754611a7b797fc49959e672d27bb170632b47986bf0146","sha512":"a2abcec7d5721c15e39168439a0d23a5d7fc31ebdb018f958c06ddf2c9b4d36c49db2ed64b3436337ce8955eba134df6f0bad0fb77c73a4cd04a46c2778dda3c","ssdeep":"","tlshash":"32e023c4f285e4aeb80e41d5416f0014a095251945012a1810a497683039e5c06ca281","first_seen":"2026-01-12T23:00:02.10556Z","last_seen":"2026-09-14T03:04:38.03866Z","times_seen":642,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091217083018730.jpeg?auth_key=1789360074-0-0-ce37ae24d80937609ad7c54e95f4a8f2","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.311Z","timestamp":1789355031311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091217083018730.jpeg?auth_key=1789360074-0-0-ce37ae24d80937609ad7c54e95f4a8f2 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 75376\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 09:08:35 GMT\r\nETag: \"69a24329ee635b061c245a6b3058ef79\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE12[360],EU-GER-frankfurt-GLOBAL1-CACHE6[200,TCP_MISS,360],1.1 82386e4e4f56a0c01411d1aea6f3fd46.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 61e0bc445344296a7e3e31cd3aec148c\r\nnginx-hit: 1\r\nAge: 148975\r\nX-CCDN-Expires: 2443040\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":75376,"size_decoded":76280,"mime_type":"binary/octet-stream","magic":"data","md5":"69a24329ee635b061c245a6b3058ef79","sha1":"75f2e3a686c31cc5703f5e94fb6b561475ab3b29","sha256":"82a7d17781821b425461e2d0416740b3f83262d4fb9f9e0edff70a23c5babb8a","sha512":"e82aca2f0529a32b60ae9da3799329ef9f2a692f1de4d11cb2abb359b287857201aefe4a82d1038c2a144f16c7f1f4d2476d10c75607650edc13e2ea6f4d0ff2","ssdeep":"1536:eBUDb4rbInJMTvSDFu7L0g2ghevjz9c8OFH2WW5C+Knrg:eCDbaInW6FK0g/hOOFTW53Knrg","tlshash":"617312e4a1a2eb7362cf1ee3f341d16b90fbe485103b6e7094c162891d0c9587b9319b","first_seen":"2026-09-12T23:27:37.709919Z","last_seen":"2026-09-14T03:04:38.040086Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":-1,"dns":451,"connect":50,"send":0,"wait":95,"receive":73,"ssl":428},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-02/714c2235dec309e915e2df7e7ef3a992.gif?auth_key=1789360108-0-0-c9a11e5e4adb098d64c65861c4c79f55","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.356Z","timestamp":1789355031356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-02/714c2235dec309e915e2df7e7ef3a992.gif?auth_key=1789360108-0-0-c9a11e5e4adb098d64c65861c4c79f55 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 398176\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 02 Sep 2026 14:50:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"9d30a7da04fea3d121618527954acadb\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE9[18],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,16],1.1 82386e4e4f56a0c01411d1aea6f3fd46.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764125\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 78580a6d2fd81484547970b76985ffa6\r\nnginx-hit: 1\r\nAge: 827878\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":398176,"size_decoded":399074,"mime_type":"binary/octet-stream","magic":"data","md5":"9d30a7da04fea3d121618527954acadb","sha1":"5058f198a30e0e2483479433868bf2df919529df","sha256":"d7f4a64424fafe57b8dc894423930717a7a314665bb993d54c3f2828c4f4ea8a","sha512":"2ac2aa8d51b50acdac7d4e06ea1ab649142d0ceb06d3389641bc45393af91534ea2669e14e4503f0d26a8babcccbe9ce88b8894891cef7e95dea795540e3b8a5","ssdeep":"6144:SIVAdIGbLMielcdmHK8DsAbsWkK0GBlVEuzz/+vNYv0cYgV0nY8zpZ+W34Py:zVoIGMi389DPkK09sz/NvRJCfNZdEy","tlshash":"2b8423eaf238d836acf3e97620361157159fea2e8a3d94cae0d910d72b510af430571f","first_seen":"2026-09-06T03:54:00.962644Z","last_seen":"2026-09-14T03:04:38.041495Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1350,"timings":{"blocked":1172,"dns":0,"connect":0,"send":0,"wait":55,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-04/2e3b616ab4dd38cb7d622ec0698a7717.gif?auth_key=1789360108-0-0-fa96b9c556be5105da4cd1e4575a437b","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.358Z","timestamp":1789355031358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-04/2e3b616ab4dd38cb7d622ec0698a7717.gif?auth_key=1789360108-0-0-fa96b9c556be5105da4cd1e4575a437b HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 113664\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 04 Sep 2026 11:08:45 GMT\r\nETag: \"990194c73c1cf6db81ed8c832911fe22\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[16],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,15],1.1 e59bea79ab5f15feda92136bc7b74158.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1763898\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 7d503748214003ea5986b09e652eae38\r\nnginx-hit: 1\r\nAge: 828105\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":113664,"size_decoded":114563,"mime_type":"binary/octet-stream","magic":"DOS executable (COM), maybe with interrupt 22h, start instruction 0xb85e7d42 a00390f1","md5":"990194c73c1cf6db81ed8c832911fe22","sha1":"946bd19cc3fef4560964c2700b58bc6c2c77b3c1","sha256":"e2c81018b876352bd8ad5bd579cd89dc1e065a77fdb12a6eda70649c80b9a7b7","sha512":"35b9c48933f7bb2d152b0e370c0e6a4a9b8314a75f9ad2a4c9bcf7d22f05ce93c8da0dee4f6a00dd37b1d1d5e5869ee30cf0e88cb57b44a04d514ee85f2f8b29","ssdeep":"1536:cRATi7GnE3K5Kp6h3fKZe5MFl/m98BccQNko3y8lKFi2ouKMeUSka1lEmBAAxpbF:cmmZ6Ae3CjecBt8lKEuhjXAAAx4tDS","tlshash":"63b31252dc9623f5edc52fa7e6a24374c887221b7664123607b49079cb18a4cc57f39f","first_seen":"2026-09-06T03:54:00.922813Z","last_seen":"2026-09-14T03:04:38.058101Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":1182,"dns":0,"connect":0,"send":0,"wait":54,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-05/cbeeda36bb6893a79abe4d60f34c50ee.gif?auth_key=1789360108-0-0-838f7a1d1b8003ffcf65e4df252c0f7f","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.360Z","timestamp":1789355031360,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-05/cbeeda36bb6893a79abe4d60f34c50ee.gif?auth_key=1789360108-0-0-838f7a1d1b8003ffcf65e4df252c0f7f HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 49600\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 05 Sep 2026 09:39:13 GMT\r\nETag: \"0c4489fb735423bb7302b06feee30c4d\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[13],EU-GER-frankfurt-GLOBAL1-CACHE9[0,TCP_HIT,12],1.1 d9bcd0a29e17b9290f8c9f1617335954.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nX-CCDN-Expires: 1838775\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 57d5e7f755dff5fd34986f3f12735197\r\nAccess-Control-Allow-Origin: *\r\nnginx-hit: 1\r\nAge: 753228\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":49600,"size_decoded":50499,"mime_type":"binary/octet-stream","magic":"data","md5":"0c4489fb735423bb7302b06feee30c4d","sha1":"37806775cb36c2d52f3c8d3ae414dd7c2d5447c1","sha256":"20ef7693747421b10f23f42af7e5d6972cff228963fe0629bd1eab4e86d081bd","sha512":"46aafd6cdb71b197f2abecb945724e5abe5d1f3ee148978ed55c71ec35b2d0214dd6d60501538b09986919cc552dc0b38ac6f7f51a2eb2b3f01a5d6ba61c5144","ssdeep":"768:MCOx930Nta1NKvFZEDAxXRE4YEYclh6K6epKqRq2mBY+h158ymTqYzLZT11zECD8:MNuQcJYEJn5KqRKY+TWylYvhT4CDPwW6","tlshash":"4e23f15feee1aa08de324fd12147f59ef33317054f9ca89996114a73a734a098227f62","first_seen":"2026-09-09T02:54:48.231072Z","last_seen":"2026-09-14T03:04:38.059832Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":1191,"dns":0,"connect":0,"send":0,"wait":55,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.169.246.224/api/eventTracking/batchReport.json","fqdn":"54.169.246.224","domain":"54.169.246.224","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.551Z","timestamp":1789355030551,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.169.246.224","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E1:F5:C4:EB:25:80:1D:05:60:22:E0:74:83:CE:D3:F8:5C:6E:A8","sha256":"35:81:43:93:93:2A:5F:C9:7C:37:B4:6B:6B:1C:D4:CC:18:D0:15:BF:67:F3:7B:ED:30:04:3B:B6:B1:C1:C8:DF"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.169.246.224\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/css/index.css?v=1.0.1.32","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.777Z","timestamp":1789355029777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/css/index.css?v=1.0.1.32 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 855\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: 652dca86314071086aa76415\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\naccept-ranges: bytes\r\netag: \"69fc0d6e-357\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: iee3x-Itm7x8Q_u8V4GAl7xqe87owCPsQ6ZMFAxda_1ZC1c7QBTNtA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":855,"size_decoded":1344,"mime_type":"text/css","magic":"ASCII text, with very long lines (855), with no line terminators","md5":"f981fdfcaf909ba51455f063e572af2c","sha1":"240bbf403cb1dd2f86778fe67fc8286cbd215476","sha256":"34d1fb7dc7897f064f237817a3769451c85ca69f3ca16c0c6fc0b4f3a6c6239b","sha512":"156e8642dec57a8f028c6fd014553a7fca535cd03d5abe3b20d172a7144acbc77f68111e8fba0eff96a4f238c84592f6961835f9838e576f016e46fd4c8804a3","ssdeep":"","tlshash":"8c11af456abc102b713b4db275b33efce4e5c451514f8f29ba2c32acd22c4993135179","first_seen":"2026-01-10T16:08:46.667721Z","last_seen":"2026-09-14T03:04:38.061585Z","times_seen":612,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.254.116.18/api/eventTracking/batchReport.json","fqdn":"54.254.116.18","domain":"54.254.116.18","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.548Z","timestamp":1789355030548,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.254.116.18","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:B5:A6:88:F6:A4:E6:F5:D7:12:B3:8D:C2:5A:9E:F5:B6:20:51:A8","sha256":"63:5E:8E:DC:19:95:6C:6F:45:14:21:6C:62:25:87:72:1D:94:E0:D7:A7:27:78:92:B1:00:7C:15:B7:57:E6:F0"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.254.116.18\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/utils.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.649Z","timestamp":1789355030649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/utils.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 3004\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 4da0e403b7dcab346aa76416\r\naccept-ranges: bytes\r\nlast-modified: Tue, 14 Jul 2026 04:37:22 GMT\r\netag: W/\"6a55bd02-2122\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: dqArjjWLSLcr3tz05mAdyqEZlaPALeQ3WKO1swiufE7WaRzGS_JaOA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8482,"size_decoded":3535,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"985db9edcd1fbd56e52ca80de9c291af","sha1":"91b58299a59ac0a8a7ab59cebbc576f7c59c4ec1","sha256":"f1aacd5936646301406a18abbbcce4bd79731f97a6b0b4c2529b10acf70e2e1a","sha512":"1612093f2fe32f9227822fbdffc41c8c762b50af5a29a07d89bd077f1c93c4701e892776582c872b6cd5889de1265f4794f28e0422853a62c8d8f82910f54c97","ssdeep":"192:MBYxE7w2imkh8eqRs18oQ8zta4zti8Veih9BJxiaGJ1EdVTDEyBL9VTDEyu:8N7/imkhcRsuo1HNFHiA3738","tlshash":"1302720929f3555041a3b468a71fa600f634a1233429ed59bf4ce7a0af45e69c2f3adf","first_seen":"2026-07-16T03:06:17.977767Z","last_seen":"2026-09-14T03:04:38.062321Z","times_seen":42,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/validator.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.064Z","timestamp":1789355031064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/validator.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 6014\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: c0e4c98b247f56136aa62765\r\naccept-ranges: bytes\r\nlast-modified: Sat, 16 May 2026 07:54:58 GMT\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\netag: W/\"69fc6db7-4296\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: hxHnsCV6aje-RqWsdpUez77onT71h6PblGPGfEDOrd6ZouHnfb2Ilg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17046,"size_decoded":6551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17046), with no line terminators","md5":"86b6dc8ccf6dffeeb920601dccc7fde3","sha1":"3171e9146d3c0eb1d22b2ee5f0531e064ccde365","sha256":"943d288e5c21c83c26b2a8b0da35339bc849b255870f5d2bbeda6697dd524793","sha512":"02d3c288ad8aa2467a6f1827c1fac67acd3fe3f36e4b54512a95dc2518c796445552fe73c2b8f0c49f7eeb70015555d6751c9560634f33a5a92164bafb7f5a98","ssdeep":"384:zcsgngnF2SE1B3pvYSrLQfqLfuNlMUaeopveoTweouMeo72eoukeou7eou4eoudh:NOzBpvbfuNldaeeveiweJMee2eJkeJ7+","tlshash":"367242c836d9b41d86b321f6202f7057b22ba455042ed841f3bda0f5aff845f5252faa","first_seen":"2024-11-17T05:55:40.958015Z","last_seen":"2026-09-14T03:04:38.063034Z","times_seen":1204,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/b174d8bda7b6c64cadfd1f1519f80fc9.gif?auth_key=1789360108-0-0-cd96dce1ae3f7629feaf37032716d25f","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.626Z","timestamp":1789355036626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/b174d8bda7b6c64cadfd1f1519f80fc9.gif?auth_key=1789360108-0-0-cd96dce1ae3f7629feaf37032716d25f HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:56 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 507440\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:10:26 GMT\r\nETag: \"43fb23cd80421460bb278aadc4c4df15\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE14[198],EU-GER-frankfurt-GLOBAL1-CACHE7[194,TCP_MISS,196],1.1 a2cac9c5f0e90f8b7fede4ac9aca75ca.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 352855122a6fd1187da3b7e31bc8b1af\r\nnginx-hit: 1\r\nAge: 222792\r\nX-CCDN-Expires: 2369295\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":507440,"size_decoded":508345,"mime_type":"binary/octet-stream","magic":"data","md5":"43fb23cd80421460bb278aadc4c4df15","sha1":"970bc69ea8dc95c1a0aec9ed36a032f5e7c8b772","sha256":"feb0452cd77505f6bdd6cb48e57f02f01a6f8b8193567eae4db045b66cd93c1f","sha512":"7688cca39777f872cd9402f6af6decde54b5b5aff101393d4efebdc593b9445b0d5455f0dd7e766ff1cd993384003465de1a6d6b305f2b72280b1b8b61ee3de8","ssdeep":"12288:bBrG2eLy6fxp4l8sELveQYBE/GKdSc38/Y3+:bUXLy6JO8rQBOzkc38e+","tlshash":"2bb4236d4f9b7832c23ef739684098f7c30340c82c959e1a5c875e5a2b6d46e6fdb186","first_seen":"2026-09-12T09:44:15.099625Z","last_seen":"2026-09-14T03:04:38.064609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/api.php/api/report/index?url=https%3A%2F%2Fbeat.diyzxcw.cc%2F","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.133Z","timestamp":1789355030133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /api.php/api/report/index?url=https%3A%2F%2Fbeat.diyzxcw.cc%2F HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: br\r\nx-request-id: 067a481d7389cac06aa76416\r\naccess-control-allow-headers: content-type,token\r\np3p: CP=\"CAO PSA OUR\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: gsVNCiwE2zse16rEVMncnH2n475ueJC-1WmGXQadU7wxAXJLwuD4MQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3032,"size_decoded":2812,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (3032), with no line terminators","md5":"b870513d20a1c350e9b74ddd796758c7","sha1":"f5bc8648ec4a94e05a8f4ee8ce5fe253be7dbf12","sha256":"fb455cbddb07784ef6c593f1c1caff28868f44d18eeef3bc4fe3f8ad6f2f4bca","sha512":"707955451bc79c884102e7e4f17451400da29c794082a30ab4fddec497b7e8a88d12fe82727a292ee9e1ef2d940c1d76920bfe654843e433971a5c45e4554502","ssdeep":"","tlshash":"78514d791898d4e4019d0d503757a74bee3fbf4626edc7473a79e55a1822d218081fec","first_seen":"2026-09-14T03:04:38.066068Z","last_seen":"2026-09-14T03:04:38.066068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-R4PBHCTFZN\u0026cid=1584091551.1789355030\u0026gtm=45je6992v9198755983za200zd9198755983\u0026rcb=6\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=411950555","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.317Z","timestamp":1789355030317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:40:49 GMT","end":"Mon, 02 Nov 2026 08:40:48 GMT"},"fingerprint":{"sha1":"AC:46:A3:8B:39:87:22:F5:32:ED:16:91:E0:7E:28:F9:39:7F:D5:13","sha256":"A4:B2:FB:D3:1E:80:B3:DC:DB:0F:63:1F:D1:60:FE:3F:E6:F8:61:9E:91:4E:FF:2E:A6:1E:2D:71:C9:D0:1F:75"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-R4PBHCTFZN\u0026cid=1584091551.1789355030\u0026gtm=45je6992v9198755983za200zd9198755983\u0026rcb=6\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938465~115938469~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=411950555 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-14T04:40:30.822311Z","times_seen":1065063,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":35,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/plugins/lazyload.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.648Z","timestamp":1789355030648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/plugins/lazyload.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 3709\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 9bb1e1b61a222a886aa76416\r\naccept-ranges: bytes\r\nlast-modified: Tue, 14 Jul 2026 04:37:18 GMT\r\netag: W/\"6a55bcfe-2a72\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: IleWMdcdRfcZQL2ErHjidqu2bzbIZh61XL-RsuPB028SVrPMcrkoaA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10866,"size_decoded":4240,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7139f0a97112025799f756c0899f1065","sha1":"30200c48cf6dfe113da59f34d5717931db95936f","sha256":"59a9eb35467114d1b9de514e0bc8076fd718574bf31f7f682818edc4e6c7b2fe","sha512":"a3dfe1a1aa79a677aba128171310c1153a91239c93583dc251aafda4ec06801d3d1ba9453c7c6624d2ab56b73db246e3a8649804626f9e9c969f66f97b6129dd","ssdeep":"192:zmhIGnQPGwaf49zCFNnBGHa75v6+s3y/yD4I1P1kVHt0kegt6rxhadLbPlJWCR/J:zmZBGE9L4GigQrxkdlLF/qo","tlshash":"b3223d5d2af771670973b4accb2f99167a00900b2009de667e8ca2546f05938def27ed","first_seen":"2026-07-16T03:06:17.917244Z","last_seen":"2026-09-14T03:04:38.068788Z","times_seen":42,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-28/fbd70f4dfbbb576e64120055a81c0818.gif?auth_key=1789360108-0-0-2ccbe09437fed2a285422e3281b8a7cc","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.343Z","timestamp":1789355031343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-28/fbd70f4dfbbb576e64120055a81c0818.gif?auth_key=1789360108-0-0-2ccbe09437fed2a285422e3281b8a7cc HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 210880\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 28 Aug 2026 14:31:55 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"593609dde6518a428b7697c277511e82\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[21],EU-GER-frankfurt-GLOBAL1-CACHE6[0,TCP_HIT,19],1.1 71c4b07776e0b6812900664940c9d7a6.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1763886\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 0cf291db2a0900f008eedb616fce4c95\r\nnginx-hit: 1\r\nAge: 828118\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210880,"size_decoded":211778,"mime_type":"binary/octet-stream","magic":"data","md5":"593609dde6518a428b7697c277511e82","sha1":"196af35d0ee2e94d72cec8834f1035cbfeeb4277","sha256":"69bc1868e087ef939b2792415c4b55a1980f438425e930636933427be9f2b893","sha512":"6ab2def72f79720f3a6f6040bea517f85196c4d9edde91a2c64828e8626d6ae6cb64285ac7a6a8e5e597c8e22a3808d9031bd3712b9b64f4b2f0eea4990126c4","ssdeep":"3072:CulHxGvJg4TnpK3k8OGquiLN2PYB2S4Mp/iqWPEuUfXnF4YAtpIwT0Z4y8z+hTin:nvNIpx8+FsMp/BqE1OYCpz0aL+tBT2","tlshash":"4524237ca2eadb343d20c7efc0452c1529a28e6fa49633441cdb5857f4d746bce1a98b","first_seen":"2026-09-06T03:54:00.909383Z","last_seen":"2026-09-14T03:04:38.06951Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":1033,"dns":0,"connect":0,"send":0,"wait":49,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/5529b1c074cc5aedfc29d941a0778085.gif?auth_key=1789360108-0-0-62a14ebc7ad8b4b0c3bcf5d5d66b693f","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.345Z","timestamp":1789355031345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/5529b1c074cc5aedfc29d941a0778085.gif?auth_key=1789360108-0-0-62a14ebc7ad8b4b0c3bcf5d5d66b693f HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 49936\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"41f8aa6650ebe4ed71ba8c8ed5273da5\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE9[17],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,16],1.1 f8f9f25f837c0ce4e62b6d917642b56a.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764218\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 2eb13cfc2278a2714532e8a25de71651\r\nnginx-hit: 1\r\nAge: 827960\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49936,"size_decoded":50833,"mime_type":"binary/octet-stream","magic":"data","md5":"41f8aa6650ebe4ed71ba8c8ed5273da5","sha1":"7e27ca869bb01e106592301079e5df12bbff92a1","sha256":"97209084d33c81cebe646844fd83f081091e91e717811de8adab5f87b261c358","sha512":"43302931f71104529a6d1e678d69346a2e8c8722289d8e7f9942219a103a863812917e9a7d4c646560be676838de766e745d4bb0bd7be3b13b3a4e82aab4875f","ssdeep":"1536:Gkic5Nb90qyC3ucbHwmeQ+gUz9GMBU4RManL:Gk9NZ0dCecbHwmH+39GMBrnL","tlshash":"4b23017481370c09e6e58979f05851371988e92a1448762d0fed6c632f32a5e7ffaf68","first_seen":"2026-09-06T03:54:00.918956Z","last_seen":"2026-09-14T03:04:38.07051Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":1053,"dns":0,"connect":0,"send":0,"wait":55,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/dd1c798c5b44b5742056f577d78873b3.gif?auth_key=1789360108-0-0-2388da6bb6be22fc87b44241dd33d457","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.355Z","timestamp":1789355031355,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/dd1c798c5b44b5742056f577d78873b3.gif?auth_key=1789360108-0-0-2388da6bb6be22fc87b44241dd33d457 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 32016\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:38 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"3029566199a98e427d7cf414808f029d\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE9[12],EU-GER-frankfurt-GLOBAL1-CACHE3[0,TCP_HIT,12],1.1 2c29bb35ddacc1dc2616fe65bdf5122e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764044\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 1dd69db9310251f8219e66e65059bd43\r\nnginx-hit: 1\r\nAge: 827959\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":32016,"size_decoded":32913,"mime_type":"binary/octet-stream","magic":"data","md5":"3029566199a98e427d7cf414808f029d","sha1":"956e69cf3f356ded9777da02f49a763a47063605","sha256":"d974a31542b0406ecfed98da47eea7e8d39dd00a0df3281a30c72edc3427b39e","sha512":"c7713d369381af21073689be7f726e9de88f2b2e3078f08e419539873ee96c391164077ac32db3f4bdd7dcb4ae08ffab84e2e646387dcd5c8840917015b80093","ssdeep":"384:uTyF6+QwCDE6crrg4PyYEIoqctA6NDepmtaCQaedvx3+k06RSbdRSnTxJnAk8Cdr:CV+9NYvqc6UCpm83N+k3CGDA+cNy3X","tlshash":"fde2f172dc22718bfae911ad5cd5c86c7748a3b931a4ac120832d9fe873cd69d778062","first_seen":"2026-04-17T09:25:03.343106Z","last_seen":"2026-09-14T03:04:38.071215Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":1155,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/menu-h5.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.793Z","timestamp":1789355029793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/menu-h5.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1603\r\nserver: nginx/1.22.1\r\nx-request-id: 77a74d2bbd6c33f46aa629a2\r\nlast-modified: Sat, 16 May 2026 07:54:06 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: \"69fc0d35-643\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: dVP0JHo8kO0bsfUnZQcWEXZfUxXXa5QYAkPJ4F7jdz24sDX0Y1p5Fg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":2100,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"4843c23bfcf8431a183757f5d1db0a8b","sha1":"d6f5da8031105a61acdbe92109bf356324dc6c45","sha256":"cea03b7a08d4a73cf9e80221e2941b229ac12f00111db9a61d50da59fdaa06d1","sha512":"9dbdd0d414ef7a0c798198de7950036141d7b60d6c99c73ec8a03bbd72955635c914f8201bcfd9c23407e361f0ec47c541d77f2688c0c6e54bd91eafd60928ed","ssdeep":"","tlshash":"ca31eaeb62d99a6eb1291b20174fc699e5a8905cbc9da80af090570d3f7080586f9d2a","first_seen":"2026-01-12T23:00:02.149739Z","last_seen":"2026-09-14T03:04:38.072892Z","times_seen":647,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"47.128.222.54/api/eventTracking/batchReport.json","fqdn":"47.128.222.54","domain":"47.128.222.54","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.541Z","timestamp":1789355030541,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"47.128.222.54","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:38:B7:95:24:CA:59:0F:33:72:29:53:6A:3C:D4:EE:34:41:75:71","sha256":"13:DF:EA:24:63:50:38:94:EC:85:F2:60:2F:7E:82:ED:93:84:B1:C1:72:C9:F5:55:F6:FB:D6:DD:D6:3F:8C:EF"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 47.128.222.54\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/c42134e17ca810d2a5697a7f6989bfda.png?auth_key=1789360108-0-0-d546fc99df00c46d3d764c3a74fe749c","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.361Z","timestamp":1789355031361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/c42134e17ca810d2a5697a7f6989bfda.png?auth_key=1789360108-0-0-d546fc99df00c46d3d764c3a74fe749c HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 12912\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 07:56:20 GMT\r\nETag: \"200cac0f7417af5b59a109b2ab268121\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE1[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[14],EU-GER-frankfurt-GLOBAL1-CACHE1[0,TCP_HIT,14],1.1 387adc951beb5181d840dfb5d1f09488.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2351011\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 668b391d45a7c2c9658dbe65458a3586\r\nnginx-hit: 1\r\nAge: 241237\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12912,"size_decoded":13811,"mime_type":"binary/octet-stream","magic":"data","md5":"200cac0f7417af5b59a109b2ab268121","sha1":"db64d77f7bbf3b76a5c849c8a08babe4c7e52bdb","sha256":"3de7098451f99ead572cc7a8560c00b8ab65cdef8250c2b4e10c721d346a9529","sha512":"c9bea163a50bcf155b8debced15dd199fc95c26e48013c9753276458069a71f1afafd3c7c5c81c0737a635f4801f35e09398cb7940084ea6f84d61bba3e07eac","ssdeep":"192:AKT61m5iYEqYES294hnthsetXmnLlOjZLDzhO1oYRyTe6inxUx8SKQZUnYSHR/:AKW1m5i3B3tK+WnAt4FR9BngwQZI5HR/","tlshash":"5942df7a3f663742307d462d1cf6208a8056aaece44d4b47331b12b35c28fdb520e9e2","first_seen":"2026-09-12T09:44:15.035956Z","last_seen":"2026-09-14T03:04:38.073954Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1250,"timings":{"blocked":1199,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/css/common_v2.css?v=1.0.1.32","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.772Z","timestamp":1789355029772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/css/common_v2.css?v=1.0.1.32 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 12716\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:48 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 798cb6ea9689e5016aa76415\r\naccept-ranges: bytes\r\nlast-modified: Thu, 18 Jun 2026 12:53:25 GMT\r\netag: W/\"6a33ea45-ad75\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: cSeRMXHvnKOq5ygpfO4Zi3QnxSd2gm5H8zNPRen-T7M-L_DFZd0aag==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44405,"size_decoded":13234,"mime_type":"text/css","magic":"ASCII text, with very long lines (43559)","md5":"b96cd640244075782b23259d8107adbf","sha1":"5bad0b4d24d67ce2b8a803ac81e740456c99307b","sha256":"3d7849d2ccc0011e7317d3c1844eb1a15bd4a2ef36ae68cfa35dbb84929fb967","sha512":"f13bb9cecbf1042d4b71ecc4b549c12996aa656a56aaee68c880d90be303cd63200f385491d6eee6c8eb49ec342544582e3053ceea347b66deae66ecd555ba7e","ssdeep":"384:oE0QTX03quhZgJqq3YfkHqSQzcUmbGLQR/9TaOE5PLbnMWOLcUC+qsdp5sNkXZlC:oE0AePZgJqq3YfMLFuHUC+qbEZraBVj","tlshash":"7d13d6a26215113db82b92b7d4e1ad8df224db81ff3757fbf990a121c6c17d52a32218","first_seen":"2026-06-18T23:59:55.035322Z","last_seen":"2026-09-14T03:04:38.07542Z","times_seen":74,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-R4PBHCTFZN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.775Z","timestamp":1789355029775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-R4PBHCTFZN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nexpires: Mon, 14 Sep 2026 03:03:49 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176418\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530428,"size_decoded":177022,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"14dce8692e2c3fc54767824622f58152","sha1":"ed0d992f2f1f29530400516c3946c8aae822c470","sha256":"da2056dd6b906f93ec2336b4569c849c5df6ebc6e40fa0ea0dee86f510c3b15a","sha512":"4a7e33444cca62ff247c260b259e3e5d33c0ded06226e49fd9e08fd76852dce8bb9ea9e1ddf88b773a5a00668d441d0ad907f5cfb8357645ad9ef4e4ef018e63","ssdeep":"6144:FtFPf1L6SSxQhmgyyEydQV80ucTPbNELR3/jbxWS3PKNS3I9Z:Fz50yAynNxJPiSk","tlshash":"bfb409ce73d674229396f078903f01cba57b29a2b49cc896f18adce02e3455a5167f7c","first_seen":"2026-09-14T03:04:38.076158Z","last_seen":"2026-09-14T03:04:38.076158Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":38,"receive":62,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"54.254.116.18/api/eventTracking/batchReport.json","fqdn":"54.254.116.18","domain":"54.254.116.18","tld":""},"ip":{"addr":"54.254.116.18","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.553Z","timestamp":1789355030553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.254.116.18","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:B5:A6:88:F6:A4:E6:F5:D7:12:B3:8D:C2:5A:9E:F5:B6:20:51:A8","sha256":"63:5E:8E:DC:19:95:6C:6F:45:14:21:6C:62:25:87:72:1D:94:E0:D7:A7:27:78:92:B1:00:7C:15:B7:57:E6:F0"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.254.116.18\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":180,"send":0,"wait":182,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/common.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.651Z","timestamp":1789355030651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/common.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 7961\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 4999f6c127eaa0d86aa76416\r\naccept-ranges: bytes\r\nlast-modified: Mon, 03 Aug 2026 02:50:49 GMT\r\netag: W/\"6a700209-5e5c\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: VBN8ENljSgusn-3bdaExYpt_m1DXSz0jVrMXOeGovvo7T6eO3DfItQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24156,"size_decoded":8492,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cc46f20bac3f2ca3adcd82ff558316b8","sha1":"7ea6ab76ae323f1e7c67c49698bae0c559ee0de9","sha256":"7a6bb92eb11c36d8b3b5a0637e9c22e83bdf7e1aa699731192f133c937dcd4db","sha512":"40c34def40194083fdf69bc097c774d30330260344674d88125df76885fdf2a90493436a4a9d8decab546e491e3a4ce68491fc5f7fa91f3b61232992372d6eaa","ssdeep":"384:p3mJnkTaAxUvh8Wsfa7XvhfsqQYKyFSWC4M4cr:pWJkuAWhgfa7fh6WU","tlshash":"a7b2b92a34f2142149b771795aefa4003322a107e54bde18beec4b845fd5b3ce3e6799","first_seen":"2026-08-06T02:20:05.929218Z","last_seen":"2026-09-14T03:04:38.077779Z","times_seen":20,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/crypto.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.859Z","timestamp":1789355030859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/crypto.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 26519\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: e514aaa6cc05f56e6aa629a6\r\naccept-ranges: bytes\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\netag: W/\"6a08229e-ed93\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: GnmVIdA7GHwg6eA5gm3F0aO21RbcqJCApqrUhTAhwf-gnAHk5Ycs8Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":60819,"size_decoded":27057,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-09-14T04:34:26.983648Z","times_seen":32700,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091217131756939.jpeg?auth_key=1789360074-0-0-f8a5f6c23d35edf680af40527ef6ddfc","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.310Z","timestamp":1789355031310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091217131756939.jpeg?auth_key=1789360074-0-0-f8a5f6c23d35edf680af40527ef6ddfc HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 53728\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 09:13:21 GMT\r\nETag: \"16427e898dce47efc2e3a7f8cf3c5d27\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[4],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE4[680],EU-GER-frankfurt-GLOBAL1-CACHE8[519,TCP_MISS,678],1.1 5519a8cb450b567e8b7111ae986a9b4c.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 04220c324892b9e63bbecd921c19a4b7\r\nnginx-hit: 1\r\nAge: 148975\r\nX-CCDN-Expires: 2443074\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53728,"size_decoded":54631,"mime_type":"binary/octet-stream","magic":"data","md5":"16427e898dce47efc2e3a7f8cf3c5d27","sha1":"6e58696edd9312a900afdecfc02039e43c1394fb","sha256":"6c60445537738d91317c83563829b39721e8739152e90751d5210ac93f79a900","sha512":"afac483954c3a354e453c415ca4346bf17b055f088bd7f4bac4086981644322851d7577c765dd7151806be34814c668995ad121c504dd46fb14e6c218d017e23","ssdeep":"1536:LFfeKOON5Y8NbRhSjNdqgCkKzfzidamPN7HTQkI:pvOqSYm25f+bN7HTQr","tlshash":"6e3301c0437b9affa1c6be39d047ab6b2083584545a36ee9c25ed144f18582ff1da2c9","first_seen":"2026-09-12T23:27:37.751794Z","last_seen":"2026-09-14T03:04:38.079942Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":-1,"dns":452,"connect":50,"send":0,"wait":91,"receive":55,"ssl":425},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-19/404df1e71bb195251e18f6d92744d9cc.gif?auth_key=1789360108-0-0-1beda4ace07d3430ae01fc53c45569c2","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.349Z","timestamp":1789355031349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-19/404df1e71bb195251e18f6d92744d9cc.gif?auth_key=1789360108-0-0-1beda4ace07d3430ae01fc53c45569c2 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 48576\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 19 Aug 2026 02:53:36 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"f000c5bc309ba38fe59ef292595e296f\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[16],EU-GER-frankfurt-GLOBAL1-CACHE5[0,TCP_HIT,15],1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 1764239\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 7416c083786ad6db318441221e229227\r\nnginx-hit: 1\r\nAge: 827960\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":48576,"size_decoded":49474,"mime_type":"binary/octet-stream","magic":"OpenPGP Public Key","md5":"f000c5bc309ba38fe59ef292595e296f","sha1":"8a68a91bcf63217cc8dc29da77e846ab428a341c","sha256":"f6576f17f50e2a6e70cd63d7965431808ea6ae1cf27499792c318e87d983fff0","sha512":"746d98db4197e716b6eef953aa10b1a28031aaa97dbb53f723f18f0e17decff9cdecef68f3482a777ae74d2568fa7ac6c5adc789dbe8dfb17cf800e1b11eb982","ssdeep":"768:nnVW9Aocs4QSYzFh/WFQ/ORkegvfEjPOCSHi8fKLN9ATZIQG18K27HehyBCXBfp:nVWj54QRFheFQ/ORkndzec9117KyB8B","tlshash":"9e2302af65a42b11a27685380ea34757c3e6857f3b430783bb47fafc0296428d983f51","first_seen":"2026-09-06T03:54:00.911593Z","last_seen":"2026-09-14T03:04:38.081364Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":1103,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/analytics.js","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.778Z","timestamp":1789355029778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 08:32:55 GMT","end":"Tue, 01 Dec 2026 09:32:53 GMT"},"fingerprint":{"sha1":"1E:05:22:46:95:6D:90:0D:6A:BA:A8:E5:5E:0C:06:05:09:C6:18:97","sha256":"87:A6:A5:18:32:5A:5B:4D:2D:30:05:7D:3A:8E:6A:0B:F5:6B:35:FC:E3:38:1C:5A:19:93:F9:C9:64:93:EF:AD"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2692\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ncdn-cache-control: max-age=18000\r\naccess-control-allow-origin: *\r\ntraceparent: 00-6edf36deb2d54ecc8050732bdd338c04-909d7cb5e47845b1-03\r\nx-request-id: 21e47500-44fa-4e03-baaa-23d605bb785c\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 12356\r\nlast-modified: Sun, 13 Sep 2026 23:37:54 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a3ac29283c47a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":3289,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6946)","md5":"661ceae031b0d59dc2f3beeac0ae7cfd","sha1":"3b7e9107ffeb21d0c41bfdeef7118ea9d58be07b","sha256":"b270afc5f9df7bcd9239c22857fb1511bba1398a28b1c3548272d720cb433c62","sha512":"b9630a50fbf1c6db29b47246715f640bdc24ed2d268627305989e615be4999fac0d8cbbef4336c2bae701eef903554954566e8dc23a6d623ddf7cfedffbaa062","ssdeep":"192:04fDU0pA7KQisEplEXQI5AuTYafgbNCz1Rx5NFKtiF:jfDU0pA7KQi3plEXQI5AygpC1RnK8F","tlshash":"c8e11a9c723075790877ada1e5ff3743f233a563a881e0914219dd802dac98f42abddd","first_seen":"2026-01-07T13:13:26.365481Z","last_seen":"2026-09-14T04:25:11.66473Z","times_seen":14969,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/require.js","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.788Z","timestamp":1789355029788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/require.js HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 7883\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: b71a00daa7223e136aa76415\r\naccept-ranges: bytes\r\nlast-modified: Sat, 16 May 2026 07:54:06 GMT\r\netag: W/\"6a08229e-4712\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Jy-pkCUlGLz1Kj5rnw-yAyCrCOiGNkOWOK1oA8s9zVDWW_6pV8T4hA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18194,"size_decoded":8414,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17667)","md5":"a09aad7fd8e9d3243a959fe0939c8e03","sha1":"c833c521341ce46183ad1b132acc73d66ccdcdaf","sha256":"c8a84fc28195df3f6388caf78a0aa32e95788e4898f573f198cd4fdd8e1a9588","sha512":"b542218b267aa37ca97b91cdc84d8af0350cb343d803a9820d084c6afbc8a69dad20c14d6db08177a6b4f8f6e4aa31571f892b67eebc1fa848ab46951d0cad13","ssdeep":"384:Cv6/vGiN5cMU8QatLePlko998VpSAIiQbvPHSEDO11yy1qlMW2IP+VW4Ml:fG7MU8qPlko998PhIhb3HSEDM1yy1qlJ","tlshash":"ae82d7ee37e5f913b22232f490af504a6277e953140cc544f619e8f5acb856876a3e38","first_seen":"2024-11-17T05:55:40.964969Z","last_seen":"2026-09-14T03:04:38.082754Z","times_seen":1295,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.ahrefs.com/api/event","fqdn":"analytics.ahrefs.com","domain":"ahrefs.com","tld":"com"},"ip":{"addr":"172.64.148.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.175Z","timestamp":1789355030175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.ahrefs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 08:32:55 GMT","end":"Tue, 01 Dec 2026 09:32:53 GMT"},"fingerprint":{"sha1":"1E:05:22:46:95:6D:90:0D:6A:BA:A8:E5:5E:0C:06:05:09:C6:18:97","sha256":"87:A6:A5:18:32:5A:5B:4D:2D:30:05:7D:3A:8E:6A:0B:F5:6B:35:FC:E3:38:1C:5A:19:93:F9:C9:64:93:EF:AD"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: analytics.ahrefs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 243\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":243,"data":"{\"n\":\"pageview\",\"u\":\"https://beat.diyzxcw.cc/\",\"l\":[\"en-US\",\"en\"],\"k\":\"z5RseJ8/6WshocFGmIZIFg\",\"r\":null,\"sw\":1280,\"sh\":1024,\"sr\":1,\"t\":\"91porn,91pron,91porna,91视频,成人视频,色情视频,好色tv,國產av,a片,52av,91porny,黄色网站\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ntraceparent: 00-fb20d6587cfb4d6a9fb7ae386642071f-45629ff6af9c4b82-03\r\nx-request-id: 16e40c1e-2515-458b-a8e8-5d53f62f7471\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: a3ac292aaee256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":467,"mime_type":"application/json","magic":"JSON text data","md5":"1bdd82600d2859af8d96bbd39fc8a3a1","sha1":"8d876d917ce9efdda1bfc85727d421ab541a7861","sha256":"d42d95676a5fb59c33cf368c1c8fc71930805c1f4111bb007f02ca6bc05ed42a","sha512":"7a500f01a6c98df1379077a6768bd2e2451fc5f05703ce6577162d21869eceed475dbd288e8dfcf9dd6753ef1a15a0ceb121f4e0100e5a6c346b64b86506715d","ssdeep":"","tlshash":"a150000f000000300c000000000000c03c3330c300003cc000c00c0c00030303000330","first_seen":"2024-12-12T05:05:27.500171Z","last_seen":"2026-09-14T04:25:11.661524Z","times_seen":22652,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":8,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/icons/icons.svg?v=2.1","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.220Z","timestamp":1789355030220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/icons/icons.svg?v=2.1 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 11587\r\nserver: nginx/1.22.1\r\ncontent-encoding: gzip\r\nx-request-id: e5c201a356a1db0f6aa629a3\r\nlast-modified: Thu, 04 Jun 2026 16:31:27 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: W/\"6a1e8008-7d85\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: du89g3WNxJw1aZ6MGfX0xvUn3vJQTtQCO8LxcUZM4_v_3AXHU4MoGg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":32133,"size_decoded":12116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56a3867c680b2770a44cd7eaaf7f5107","sha1":"09fb75d7e61ad195984c72a7859af79140393bbc","sha256":"f9a5bb89f3322897bb7e467b75fdcbaeff6fd9f4c39d01422976af03ca9aae45","sha512":"2f73fbe782546eef2b3991d2f2cfa4e40cc1fe42a4414e6c10133662ae4228ea4b5bff0313f7bfd436ea03174e2b0b9a12a7e472b29d054ad612953a588a069d","ssdeep":"384:oRtthcCeuZT68nxANMwzTQrdZSPNBDl/IWtdOl+9RXH/3Ulvg4wh5fnMz8pGCxh2:uXE86d0RoNBDGyGYH/3UUfnWshSjE23","tlshash":"2ae2a6e9932c45dc9447c63dff797132532fa0fa30d845aca99e4b38a2931dae517e80","first_seen":"2026-06-03T23:45:32.773642Z","last_seen":"2026-09-14T03:04:37.96118Z","times_seen":96,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-dc2-prod-08.cyou/api/eventTracking/batchReport.json","fqdn":"api-dc2-prod-08.cyou","domain":"api-dc2-prod-08.cyou","tld":"cyou"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.541Z","timestamp":1789355030541,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: api-dc2-prod-08.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"api-dc2-prod-08.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"47.128.151.158/api/eventTracking/batchReport.json","fqdn":"47.128.151.158","domain":"47.128.151.158","tld":""},"ip":{"addr":"47.128.151.158","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.552Z","timestamp":1789355030552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"47.128.151.158","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:B8:E4:40:B6:9F:D0:81:64:85:07:59:98:81:E5:BD:22:74:14:7A","sha256":"26:FF:4E:1C:64:49:F9:5B:89:4E:5C:AF:0A:B4:B6:A0:5B:D7:33:BE:E7:70:16:0C:67:B1:3B:3B:39:EF:46:9A"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 47.128.151.158\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":180,"send":0,"wait":181,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/4826623d95a708196555a114f163ccb2.gif?auth_key=1789360108-0-0-a28c74b2faf68665424bb73ae202f42a","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.334Z","timestamp":1789355031334,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/4826623d95a708196555a114f163ccb2.gif?auth_key=1789360108-0-0-a28c74b2faf68665424bb73ae202f42a HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 35120\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:08:00 GMT\r\nETag: \"9ea18ea8d7483f1b9e64d60d5bcd19e6\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE11[16],EU-GER-frankfurt-GLOBAL1-CACHE8[0,TCP_HIT,15],1.1 934706f40ffde6f857deae8d024c1192.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2369296\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 7cd611bf4142acb32cc1f6781a2335ff\r\nnginx-hit: 1\r\nAge: 222882\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35120,"size_decoded":36019,"mime_type":"binary/octet-stream","magic":"data","md5":"9ea18ea8d7483f1b9e64d60d5bcd19e6","sha1":"6407812141e6cb647f86438fc71e6301f2c61680","sha256":"6c35409b5885afcebe3e97bac44451264239964c19596dd8e5dc49451b7c9694","sha512":"64324f72803a0875dce6072b6bc5a1de97ee9c660a5718a5cf3cc75c2a407b2e0d5321594bdec8eea70b3bf74515cb3d55c6c94734e6d3bc48b6b6d974159629","ssdeep":"768:DqIg6q31WlkIwTK8qda/sGxY1+1z+F7Aesr2WF99tEdiZU+QZ7FM:+Ihsukbqo/sGQLaesr2WF99tdZUnM","tlshash":"6ef2f194b510737441ac2bf98de1c099245776befe026776fdc98a6e282db02b5f0173","first_seen":"2026-09-12T09:44:15.076589Z","last_seen":"2026-09-14T03:04:38.084678Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":949,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.255.198.114/api/eventTracking/batchReport.json","fqdn":"54.255.198.114","domain":"54.255.198.114","tld":""},"ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.542Z","timestamp":1789355036542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.255.198.114","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A8:42:07:A5:78:06:03:7A:7F:86:58:26:5C:3B:99:86:DB:4E:BF:A4","sha256":"0F:D2:5B:64:F6:93:3A:92:F0:2B:8F:0A:BE:66:3C:40:D1:D4:4E:21:AE:B6:3A:A6:14:AA:9F:86:2A:A6:B3:3E"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.255.198.114\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 10080\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10080,"data":"[{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2097535679152852992\",\"creative_id\":\"2097535679152852992\",\"ad_type\":\"1\"},\"event_id\":\"c637ed38194483dbf933ab38417e2646\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"5aef7ba38133c74e8afb76474c487fcf6631e02ff80d6079bc8c28a829e11616\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2094469213542400010\",\"creative_id\":\"2094469213542400010\",\"ad_type\":\"1\"},\"event_id\":\"8fafef1c155fa7f716be702b011f5a55\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"fa349d1a8c260fa8e8018cfbc978cdde37955165e6819109b101ea40641c510a\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"app_lifecycle\",\"payload\":{\"page_url\":\"https://beat.diyzxcw.cc/\",\"page_load_time_ms\":0,\"viewport_width\":1280,\"viewport_height\":1024,\"lifecycle_event_key\":\"web_load\"},\"event_id\":\"78f9aa972f79c758c8a98ccfe88d061d\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"5fda5a2cc643c688faa970c5898832866cd66ce2c13d0125f50ae5f3e0ac8226\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"app_page_view\",\"payload\":{\"user_type\":\"normal\",\"page_key\":\"home\",\"page_name\":\"首页\",\"referrer_page_key\":\"\",\"referrer_page_name\":\"\",\"current_page_key\":\"home\",\"current_page_name\":\"首页\",\"recommend_trace_id\":\"\",\"page_id\":\"b5e7da8802473ce0e451bed52f31a80c\",\"page_enter_ts\":1789355030,\"page_url\":\"https://beat.diyzxcw.cc/\",\"page_load_time\":0,\"viewport_width\":1280,\"viewport_height\":1024},\"event_id\":\"dbd18fdfedf8962dd83d9db3f2490dce\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"2fb16aecb46c0a6b6ddf6e868d43bff7c8844392ca1dd6eb56ef3d49d5182019\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"sdk_init\",\"payload\":{\"platform\":\"web\",\"os_family\":\"windows\",\"device_type\":\"desktop\",\"browser_kernel\":\"gecko\",\"browser_name\":\"Firefox\",\"browser_version\":\"134.0\",\"browser_platform\":\"Linux x86_64\",\"display_mode\":\"fullscreen\",\"visibility_state\":\"visible\",\"screen_width\":1280,\"screen_height\":1024,\"screen_dpi\":96,\"device_pixel_ratio\":100,\"orientation\":\"landscape\",\"viewport_width\":1280,\"viewport_height\":1024,\"color_depth\":24,\"max_touch_points\":0,\"touch_support\":0,\"hardware_concurrency\":8,\"cpu_cores\":8,\"device_memory_gb\":-1,\"is_debug\":0,\"language\":\"en-US\",\"timezone\":\"UTC\",\"cookie_enabled\":1,\"local_storage_enabled\":1,\"session_storage_enabled\":1,\"indexeddb_enabled\":1,\"service_worker_enabled\":1,\"network_type\":\"unknown\",\"connection_type\":\"unknown\",\"effective_type\":\"unknown\",\"downlink\":-1,\"rtt\":-1,\"canvas_fp\":\"41c4103e22b1754996104acdd999aca0\",\"webgl_fp\":\"d963371fee817cfe3e0d6dcb7902bf90\",\"webgl_vendor\":\"Mesa\",\"webgl_renderer\":\"llvmpipe, or similar\",\"webgl_extensions_hash\":\"c771cb601299836e556f070be0716784\",\"webgl_params_hash\":\"c80d433bea49842a3ac72927885d6306\",\"audio_fp\":\"\",\"audio_sample_rate\":44100,\"fonts\":[\"Helvetica\",\"Palatino Linotype\"],\"fonts_hash\":\"31e0d4c095464d7930338a724987c072\",\"plugins\":[\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"PDF Viewer\",\"WebKit built-in PDF\"],\"plugins_hash\":\"82feca0348ee7617d218893abca5197b\",\"mimes\":[\"audio/aac:maybe\",\"audio/mp4:maybe\",\"audio/mpeg:maybe\",\"audio/ogg; codecs=\\\"vorbis\\\":probably\",\"audio/wav; codecs=\\\"1\\\":probably\",\"video/mp4:maybe\",\"video/mp4; codecs=\\\"avc1.42E01E\\\":probably\",\"video/webm:maybe\",\"video/webm; codecs=\\\"vp8, vorbis\\\":probably\"],\"mimes_hash\":\"7f38f44d68d9b309b5d39bde3f4fb282\",\"mime_count\":9,\"plugin_count\":5,\"font_count\":2,\"webgl_status\":\"available\",\"has_webdriver\":0,\"is_headless\":0,\"headless_reason\":\"\",\"current_url\":\"https://beat.diyzxcw.cc/\",\"current_domain\":\"beat.diyzxcw.cc\",\"current_path\":\"/\",\"current_query_hash\":\"\",\"referer\":\"\",\"referer_domain\":\"\",\"referer_path\":\"\"},\"event_id\":\"3a23733e4cf007688ec4f175358ddfad\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"e21c894c5d8b56a094d68157e8f2192773e65af2f6943b9c808eb2cc38890425\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2098317768517337088\",\"creative_id\":\"2098317768517337088\",\"ad_type\":\"1\"},\"event_id\":\"4646c59a113a19fc0312a76fc3065b32\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"7614dac688d5b0cc949e4915d5a960b472187fd989e947300baf11710772863d\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2098272437563002880\",\"creative_id\":\"2098272437563002880\",\"ad_type\":\"1\"},\"event_id\":\"66c62d4f320e9fd21d0b842f06218302\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"3839bcafc784769dd2d9a13652797908330b1ac098e85fbfe73e8d4a602ac545\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2095426976782028800\",\"creative_id\":\"2095426976782028800\",\"ad_type\":\"1\"},\"event_id\":\"c9283a8df32cd1b20c62dd3503828ce5\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"ce2befd5ff0be082c9d95e155313299c6523cfc4d64b36a90a9ea05d2d465d7c\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2088563417512120328\",\"creative_id\":\"2088563417512120328\",\"ad_type\":\"1\"},\"event_id\":\"2862b4c02c273d0b3795e9f2f30c5aeb\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"3cbf480fb61e0d9f16f3d429afa05420f85eae50094c302bab8c061b8ca89448\"},{\"app_id\":\"DX-065\",\"uid\":\"\",\"channel\":\"\",\"sid\":\"f085bd672da27c9dc51106ba368c9b3f\",\"client_ts\":1789355030,\"device\":\"PC\",\"device_id\":\"5134656c0d0e3ea771aaccfae1307ad6\",\"device_brand\":\"\",\"device_model\":\"\",\"device_fingerprint\":\"a67ecb7190833f1087ce905b9d36288201a2ea27782eb7b1680be96a22f3e35c\",\"fp_version\":\"3.0.0\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk_version\":\"1.1.8\",\"app_version\":\"3.0.2\",\"event\":\"ad_impression\",\"payload\":{\"page_key\":\"home\",\"page_name\":\"首页\",\"ad_slot_key\":\"3\",\"ad_slot_name\":\"列表顶部图标\",\"ad_id\":\"2000580393188470791\",\"creative_id\":\"2000580393188470791\",\"ad_type\":\"1\"},\"event_id\":\"f71004c887fc989715e22580a6e2fb9a\",\"event_sig_version\":\"sig_v2\",\"event_sig\":\"7dc77a3fc3f6c030f450d68d2455db7553578e662357c4861a007e7465f78082\"}]"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:56 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":423,"mime_type":"application/json","magic":"JSON text data","md5":"0ab94d0fc1ecb3477a682ada19ad817d","sha1":"e6311ec9ae74beb1f7461c0ae5e81c8f835e0f3a","sha256":"7f86129f0513b8495b7ecf4f1414314df859f22b58b45b9036f4d9e48df30074","sha512":"d2da24f6eda58fd1fa39d5f154744ec618de7a1f431f149104d745db588c59b65ce10f819cc611a7241aa1470d3053c3d69ca57709becdf95e54556d4f4789bb","ssdeep":"","tlshash":"a4800433141c04430501354c00053f04105c11534f100771cc5c4715c75c074f151410","first_seen":"2023-08-16T08:22:40Z","last_seen":"2026-09-14T03:04:37.965385Z","times_seen":8352,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"54.169.246.224/api/eventTracking/batchReport.json","fqdn":"54.169.246.224","domain":"54.169.246.224","tld":""},"ip":{"addr":"54.169.246.224","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.555Z","timestamp":1789355030555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.169.246.224","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:E1:F5:C4:EB:25:80:1D:05:60:22:E0:74:83:CE:D3:F8:5C:6E:A8","sha256":"35:81:43:93:93:2A:5F:C9:7C:37:B4:6B:6B:1C:D4:CC:18:D0:15:BF:67:F3:7B:ED:30:04:3B:B6:B1:C1:C8:DF"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.169.246.224\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":183,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T03:03:49.046Z","timestamp":1789355029046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 62908\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 01:41:50 GMT\r\ncontent-encoding: gzip\r\nx-request-id: 100f46ed94e181cc6aa750de\r\naccess-control-allow-headers: content-type,token\r\np3p: CP=\"CAO PSA OUR\"\r\nx-powered-by: PHP/7.3.33\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Lbs07m9NXgag8CmBkZ2URgIGgZz8K2Zw7RsiB8hLsr3eJljY8hj-xQ==\r\nage: 4919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":452496,"size_decoded":63458,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12850), with CRLF, LF line terminators","md5":"18c75eb6ff64016b25551074a3499042","sha1":"234aad287d54fa833dc47989b83e48fea9dfbf04","sha256":"5e7e5465525f482fecb2500240bf31dee9fea8e211d968ae20c3b0c9463e566d","sha512":"18f7ec2619334323da8858c0930df6a1ac96eeecd7edfa7bbd0b424e229af5a0bfd39005251df579fe55c8b6d0bfcf344369bcccb676116b28dc0ecd36e8693b","ssdeep":"6144:WUei/IoG+XOjKfCbyfYKRYGjY1isIVoWBOCfTIB3GYnCrqxLvbpkJwkkB6WSy2vH:+i/u+","tlshash":"9fa494d406f046a301cf95523f70bb696b91b547e08b244bb2fc3b954fd9c9bca97888","first_seen":"2026-09-14T03:04:38.086381Z","last_seen":"2026-09-14T03:04:38.086381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":53,"connect":8,"send":0,"wait":236,"receive":9,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/ads-close.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.809Z","timestamp":1789355029809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/ads-close.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1443\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: c42f3552b30c05416aa76415\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\netag: \"6a1a94d6-5a3\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: fHv-spsQguLYwpa86NvCj2fcrchPBjQsuOae0E09qYut3qoS9e7Okg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1443,"size_decoded":1934,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit colormap, non-interlaced","md5":"1840e82f933a7c08af8408edfc255011","sha1":"97006c40ff1f99238f8c3df3c98826ab2ca8eea2","sha256":"ca85e50e73e0552ea9467c120d2221c68cb29d5c30a4ab54b8ef6ea7330afc19","sha512":"fa0020bc21aeca4251213ec69ea2338f8452d1fa9bde26f003d7edffc55ec612fb2c7a21b447d2a1ccd874d0f53a390da40bb93721db9329df13c9d6e5220ae7","ssdeep":"","tlshash":"0321db42a8fabc5f4192405a7649f290a833ad07996bc671121d3efbd573c554c4f741","first_seen":"2023-08-13T16:34:45Z","last_seen":"2026-09-14T03:04:38.087902Z","times_seen":21518,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.255.198.114/api/eventTracking/batchReport.json","fqdn":"54.255.198.114","domain":"54.255.198.114","tld":""},"ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.539Z","timestamp":1789355030539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.255.198.114","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A8:42:07:A5:78:06:03:7A:7F:86:58:26:5C:3B:99:86:DB:4E:BF:A4","sha256":"0F:D2:5B:64:F6:93:3A:92:F0:2B:8F:0A:BE:66:3C:40:D1:D4:4E:21:AE:B6:3A:A6:14:AA:9F:86:2A:A6:B3:3E"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.255.198.114\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":432,"mime_type":"application/json","magic":"JSON text data","md5":"092393e1dfda206a0ed8ee1aeae16f8f","sha1":"4018cae1ba803c8daf09039d65198c92771c175c","sha256":"b6f19ff83ea8039d8f5ad44d042aae02d24f0212fee3f1a2f2bc5c94eb49b270","sha512":"628d54eca5302b9a63a315745a14f1fa96ea738578f44d643eb153c00a3819f214fae06bf6cf8550021e098752594da159d4c9e69991a2233e65ceff7d58be21","ssdeep":"","tlshash":"859004d13c1d45434c15114c553775d5405d75574f100f151cd4573344dc5f4d015410","first_seen":"2026-07-02T14:24:47.532567Z","last_seen":"2026-09-14T03:04:38.088575Z","times_seen":2005,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/video_helper.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.650Z","timestamp":1789355030650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/video_helper.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 1234\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\ncontent-encoding: gzip\r\nx-request-id: fc3acb0b2ba224756aa76416\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 May 2026 03:55:33 GMT\r\netag: W/\"69fc0d35-c2f\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 2aHXuWeoeGZyEHuyBfLXu4l7msQWy6UWtTVnBpc9W7O4XERtHbB2sw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3119,"size_decoded":1764,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d037e927d0ed7a3d38d623feaa5b5b12","sha1":"b9f97a523d5c0a2f1963951fa357d6f6ddad754e","sha256":"03138e670e9973b29e3647b757fdf7fa5c5256d75815889d19b5bd56b09e1742","sha512":"68cad8a9d1e0a5b0162a5e1614a0be882acbd6c0817389b5d3d5bac42fb653093d22c9be19950f19e37bc1095c09ff02ac7ecd026f3900225ed95465fd4396dd","ssdeep":"","tlshash":"5951772e22f160661f5370763ddf450172aad103240e8f51be8e93a49fa653587f2bed","first_seen":"2025-03-30T08:44:32.867213Z","last_seen":"2026-09-14T03:04:38.089243Z","times_seen":933,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-08-26/9fc3b6c018d1e885703ad128f1999fc1.gif?auth_key=1789360108-0-0-e1511e4567b06af112d8cf3eb81ccf4b","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.342Z","timestamp":1789355031342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-08-26/9fc3b6c018d1e885703ad128f1999fc1.gif?auth_key=1789360108-0-0-e1511e4567b06af112d8cf3eb81ccf4b HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 52832\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Wed, 26 Aug 2026 10:37:17 GMT\r\nx-amz-server-side-encryption: AES256\r\nETag: \"8e738463f77c25fb97926d0df0943108\"\r\nX-Cache: Hit from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE9[2],EU-GER-frankfurt-GLOBAL1-CACHE1[0,TCP_HIT,0],1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 73c620f7097566775b8a7ffb095802f3\r\nnginx-hit: 1\r\nAge: 828119\r\nX-CCDN-Expires: 1763885\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":52832,"size_decoded":53727,"mime_type":"binary/octet-stream","magic":"data","md5":"8e738463f77c25fb97926d0df0943108","sha1":"35e4339120ea824d945927020058c705e9994ad3","sha256":"4bb16cbd309702923d2fbc205e0cadeea7234596b584b6a92e72702d481b3a6d","sha512":"435fbede1c914922a1b41815ad345ff733e5a6220310dc4a04e8ded3e550eb2d94f5b3481c3e7e9ed9976215d1967b8dc0b79f40f5f789a74fd89708db253716","ssdeep":"768:N570OD7b+WZGWc4wO+CTOgLCVPHuNHkE5JP9PZFac2VlgT016bnb6fqzfWZ9gfKS:N54O3bTZb7MHuNHNTR81lgwIe9oKAMyT","tlshash":"0d3302c340d6742df2e554a161a28582c7f65fced8ceb0b6687e818e50b1b9b1c2712e","first_seen":"2026-09-06T03:54:00.930747Z","last_seen":"2026-09-14T03:04:38.091588Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":1035,"dns":0,"connect":0,"send":0,"wait":56,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/abdce2bb56d33782cb1f28253d351477.gif?auth_key=1789360108-0-0-c33c080235eeac7799c14e9327886234","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:56.630Z","timestamp":1789355036630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/abdce2bb56d33782cb1f28253d351477.gif?auth_key=1789360108-0-0-c33c080235eeac7799c14e9327886234 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:56 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 363072\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:10:25 GMT\r\nETag: \"aa361659c6649e720538a23a0269114a\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE1[638],EU-GER-frankfurt-GLOBAL1-CACHE9[486,TCP_MISS,637],1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 745d218e533894ad50af6d2a7d1a037c\r\nnginx-hit: 1\r\nAge: 222792\r\nX-CCDN-Expires: 2369295\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":363072,"size_decoded":363976,"mime_type":"binary/octet-stream","magic":"data","md5":"aa361659c6649e720538a23a0269114a","sha1":"f6634c4491bd093b31af3a3c6afa626900e9f79d","sha256":"e6281edd481805afab79a041ec11fa637d86f9ff2d29e90b6da25fd7e40388c3","sha512":"e830eeae306c0f760bf28afaf0d339898c2cc8f212973847f97f3bed5ad4993243679f9c0f155c0dd0081ce540eff7471da1259849b5de447509763cbf063396","ssdeep":"6144:iWKfmtoUX9V2SdoL2lm2Y8k/ybvasqKgt7raEhjhTyBA5LYsFaJGmK/:ImtZX9V2hylrk/yZqKg5j+2a64O","tlshash":"c174236177d514342e663b1c0b8f4b8d8eb4c18d686b708d34829b75ed1c6b2b13fa5b","first_seen":"2026-09-12T09:44:15.047231Z","last_seen":"2026-09-14T03:04:38.092491Z","times_seen":4,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/poster_loading.svg","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.800Z","timestamp":1789355029800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/poster_loading.svg HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 386\r\nserver: nginx/1.22.1\r\nx-request-id: c91ad2e6b7a322e86aa62284\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: \"69fc0d6e-182\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: n-a7JzV93vdVUTELLDdzwUMA6_DUifMj41GQrMjtPnv1L1KNblRp5A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":386,"size_decoded":886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c35ede848029cfbed716878ae79d8ec3","sha1":"5c37be4174d8d0f4fe5943a0cccd8ab0556f9e5c","sha256":"2ef58713cf26b1922604689012b80d47ac1db5bcb98a04a4101e1cb601d72ffc","sha512":"7088e725553666e070ea58f925084765539c0073bd3a60d7b9ada41081fb22fb2f3f1e722fd417794d471979fb488d114de7d108b7396bf23b46a607acba34eb","ssdeep":"","tlshash":"40e06852d2c40f3dc22c8f181329b9ae5357c4cb45420898f9a9671a769acfb5d8225d","first_seen":"2024-11-17T05:55:40.931467Z","last_seen":"2026-09-14T03:04:38.093289Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/search/ic_del.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.802Z","timestamp":1789355029802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/search/ic_del.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 407\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: ad60158abb4ad1076aa76415\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\netag: \"6a1a94d6-197\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: EQ-zBFdh6YOrBYEr4nxn_92SxmxmCAAm3CtfnHcwW30rD4l7gL8iqg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":407,"size_decoded":897,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f43d54b1d5578225d2c8daa20381ff30","sha1":"7aa0e81247d231264f03fa87cb6db37de63f6b54","sha256":"62b45c62e8df7af84ab67af89db407a95f102cb367208501cac32b384a0388c1","sha512":"240507e72f553dee9699182052f250815135862020e6d01ad723d92121ec5850d418f7dd99f0012db799993100bda86edf53204fa27f9de8e59a00a30c38e424","ssdeep":"","tlshash":"f8e0abfa67ec94b1c9ba4b677107bc61366e1738288595091d2080542ee8584bd9c0cb","first_seen":"2026-01-12T23:00:02.16291Z","last_seen":"2026-09-14T03:04:38.095129Z","times_seen":642,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/search/hot.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.803Z","timestamp":1789355029803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/search/hot.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 519\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\nx-request-id: c83e8b8e6814581d6aa76415\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\naccept-ranges: bytes\r\netag: \"69fc0d6e-207\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: z55zJlNAgkIIWS8S2Rwqz9M07sxKzNi71LvkemqJW42LZG8vZjbPNg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":1009,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"fffbf76aa24e94b3d33a9c870649e954","sha1":"1d7e244e18baca78bb7997920345837d403c49e8","sha256":"aeed1d50b62e7b6260b4332a53c806fbfac0b609367b282f4b35bb84be41dbfb","sha512":"ca9cb82fc089847fd26df3e3d95c98bd14aaf2dd79fd1d245d78a626d204c445a29772d472a1e5cc671bb35c42290ee68e2999f0e05b747bef24c5ef0faf0b85","ssdeep":"","tlshash":"45f07eca3ba6c8bbda384ba907de0728f83e0e7d0902000d6d08303b708a544c0e21b3","first_seen":"2026-01-12T23:00:02.081037Z","last_seen":"2026-09-14T03:04:38.096686Z","times_seen":643,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"54.255.198.114/api/eventTracking/batchReport.json","fqdn":"54.255.198.114","domain":"54.255.198.114","tld":""},"ip":{"addr":"54.255.198.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.543Z","timestamp":1789355030543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"54.255.198.114","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A8:42:07:A5:78:06:03:7A:7F:86:58:26:5C:3B:99:86:DB:4E:BF:A4","sha256":"0F:D2:5B:64:F6:93:3A:92:F0:2B:8F:0A:BE:66:3C:40:D1:D4:4E:21:AE:B6:3A:A6:14:AA:9F:86:2A:A6:B3:3E"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 54.255.198.114\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":181,"send":0,"wait":181,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091217040044844.jpeg?auth_key=1789360074-0-0-a690037b043f272a7c0d9f0ad8e39073","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.312Z","timestamp":1789355031312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091217040044844.jpeg?auth_key=1789360074-0-0-a690037b043f272a7c0d9f0ad8e39073 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 68944\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 09:04:05 GMT\r\nETag: \"fbb00f56f6260de0e8dacd03f32232b3\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE3[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE2[682],EU-GER-frankfurt-GLOBAL1-CACHE5[519,TCP_MISS,678],1.1 a2cac9c5f0e90f8b7fede4ac9aca75ca.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 2693a2fb596cd1be30a2728c45105146\r\nnginx-hit: 1\r\nAge: 148971\r\nX-CCDN-Expires: 2443040\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68944,"size_decoded":69847,"mime_type":"binary/octet-stream","magic":"data","md5":"fbb00f56f6260de0e8dacd03f32232b3","sha1":"ab8d40d6a63770a08790f69c4465fa01044e7ec8","sha256":"d69f8fd1b8fc9027d242a873a17dc335c3545d6dffa18952c16f7df78b2b17a8","sha512":"c7795353d718b0b65ad61c4f1881832d33d0706519b42a45bda20853ab093c2b5f747748c3c18bb06b7f3aab73d01c3bbd3be16022e31c87a77b114b1c29fad4","ssdeep":"1536:sQS4vQifxIRcwjNXIoFUyikL/jbghT5pp3hx:sP4vru7FH/joT7Lx","tlshash":"0f6301ee11bf7b164dbba203b4d9285223d1474eaca2589c1b997cd4dba1ddc7ac00f4","first_seen":"2026-09-12T23:27:37.753518Z","last_seen":"2026-09-14T03:04:38.097442Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":450,"connect":49,"send":0,"wait":62,"receive":100,"ssl":378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091215490164312.jpeg?auth_key=1789360074-0-0-2c9e3a3bc0fa871686f37d1fd712484f","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.314Z","timestamp":1789355031314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091215490164312.jpeg?auth_key=1789360074-0-0-2c9e3a3bc0fa871686f37d1fd712484f HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 142080\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 07:49:09 GMT\r\nETag: \"d37d946fa5fc553887c46d731bbf2b18\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE3[3],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE3[17],EU-GER-frankfurt-GLOBAL1-CACHE12[0,TCP_HIT,15],1.1 3d34e163f3f1a0c4a397ad818b79a810.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2441091\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 5ebae86a09035441326bdc6a7d1ea4ae\r\nnginx-hit: 1\r\nAge: 150909\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":142080,"size_decoded":142980,"mime_type":"binary/octet-stream","magic":"data","md5":"d37d946fa5fc553887c46d731bbf2b18","sha1":"80d61b7460d1d1d8a892a7b84fe83c5fdb06d211","sha256":"e3f86010f57dacb3a132607500e549b276d5f19b707da0fd85790de9e2944edb","sha512":"adb810734f01c47a4d9061637f2a30de6759aafed84c860a06f8311af08a3d3ca76f3e8d6eaadf7bb013eafbfaad9f7b172688b3405747c871e5bb363bb82fc7","ssdeep":"3072:IIwSibBD9oA6MYHRQcQeXh3aMo0uQPTasJ6+3dgrYwv/BFg5CODgMSO3N5tpfg:IIwNrYHCZQPTS+3dgxkJSA3ffg","tlshash":"0fd312409dad5c5accfcc682a90197318ee1bdee292a6ce7f1f9c340a77cc570a60759","first_seen":"2026-09-12T23:27:37.691489Z","last_seen":"2026-09-14T03:04:38.099419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1137,"timings":{"blocked":-1,"dns":448,"connect":49,"send":0,"wait":95,"receive":114,"ssl":430},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/css/layout_fix.css?v=1.0.1.32","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.774Z","timestamp":1789355029774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/css/layout_fix.css?v=1.0.1.32 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 87\r\nserver: nginx/1.22.1\r\nx-request-id: 8573a129b7fc7a026aa4f070\r\nlast-modified: Tue, 14 Jul 2026 04:37:18 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:48 GMT\r\netag: \"6a55bcfe-57\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: SJZhtaCKCFZxYUtpgIerMT8VLw_pWLk1aDiN-kkN9U0qRQL0zfsA6Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":87,"size_decoded":580,"mime_type":"text/css","magic":"ASCII text","md5":"7078d7001af0e4af729ed7204eaae896","sha1":"18145c47c0f1b0e74a3e768a077e65375cf4961c","sha256":"c080fb69db1dfb02262e7dd54f3833abf534dbc6cf19419e50f2491a2c90e33b","sha512":"915446d78948e8ae37fb6ec7305377a5274927bae16a5b2ba3358ac48f9744d57d0e708e1485c923a51152c13477d7973dfdf3bc19ffdb9c11778a2afb383d6c","ssdeep":"","tlshash":"2bb012120164149d5001c320007d403c311f0003238d08403b2824d10fce30941612e4","first_seen":"2026-07-16T03:06:17.972166Z","last_seen":"2026-09-14T03:04:38.100993Z","times_seen":44,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"47.128.151.158/api/eventTracking/batchReport.json","fqdn":"47.128.151.158","domain":"47.128.151.158","tld":""},"ip":{"addr":"47.128.151.158","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.544Z","timestamp":1789355030544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"47.128.151.158","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:B8:E4:40:B6:9F:D0:81:64:85:07:59:98:81:E5:BD:22:74:14:7A","sha256":"26:FF:4E:1C:64:49:F9:5B:89:4E:5C:AF:0A:B4:B6:A0:5B:D7:33:BE:E7:70:16:0C:67:B1:3B:3B:39:EF:46:9A"}}},"request":{"raw":"POST /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 47.128.151.158\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":432,"mime_type":"application/json","magic":"JSON text data","md5":"092393e1dfda206a0ed8ee1aeae16f8f","sha1":"4018cae1ba803c8daf09039d65198c92771c175c","sha256":"b6f19ff83ea8039d8f5ad44d042aae02d24f0212fee3f1a2f2bc5c94eb49b270","sha512":"628d54eca5302b9a63a315745a14f1fa96ea738578f44d643eb153c00a3819f214fae06bf6cf8550021e098752594da159d4c9e69991a2233e65ceff7d58be21","ssdeep":"","tlshash":"859004d13c1d45434c15114c553775d5405d75574f100f151cd4573344dc5f4d015410","first_seen":"2026-07-02T14:24:47.532567Z","last_seen":"2026-09-14T03:04:38.088575Z","times_seen":2005,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"56.10.62.34/api/eventTracking/batchReport.json","fqdn":"56.10.62.34","domain":"56.10.62.34","tld":""},"ip":{"addr":"56.10.62.34","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.552Z","timestamp":1789355030552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"56.10.62.34","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 20 Jul 2026 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FA:46:91:3E:5B:4D:87:93:92:19:76:24:04:70:DE:45:6F:53:D1:37","sha256":"E9:A2:D8:0E:AA:B7:5B:51:23:8D:09:B5:C0:06:A6:E8:00:0B:3A:D4:44:A4:69:A5:25:A5:9A:C1:10:3D:59:88"}}},"request":{"raw":"OPTIONS /api/eventTracking/batchReport.json HTTP/1.1\r\nHost: 56.10.62.34\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 03:03:51 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://beat.diyzxcw.cc\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nallow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":504,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T04:51:35.51698Z","times_seen":18454664,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":182,"send":0,"wait":184,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/http.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.861Z","timestamp":1789355030861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/http.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 1030\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\ncontent-encoding: gzip\r\nx-request-id: bf9ef220315c43ae6aa76416\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 May 2026 10:47:19 GMT\r\netag: W/\"69fc6db7-7e6\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: UfkZuKaCwfOlqPbC-KIJqWvI4Oz04HnxoI6jsvw2-T66LHEtc8LBvw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2022,"size_decoded":1560,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"98646362ec4af0bd10c76c6700e3136f","sha1":"34fa807b8fcc6ec031995f2caeebbe00bb3a620c","sha256":"5616e94757fc3895f8e8705d9da8d1d012cebadaeec3a7608cbb05c48bf51d82","sha512":"2d789258790bf43818af9dacf20f6f6d398692715d07f54670f5ac971a0ed285ce4d9d7b0c443738bc923a078849d250e9be967cfc4c3eae66c0b089490cbf5a","ssdeep":"","tlshash":"bc41cc4b38f5941245e3f9bc97cf5034b92499439418fd247e4e8be05f458ac8a72bcd","first_seen":"2026-04-29T14:57:32.800056Z","last_seen":"2026-09-14T03:04:38.101579Z","times_seen":159,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/js/lib/zui.js?v=1.0.1.94","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.067Z","timestamp":1789355031067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/js/lib/zui.js?v=1.0.1.94 HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_R4PBHCTFZN=GS2.1.s1789355030$o1$g0$t1789355030$j60$l0$h1212221900; _ga=GA1.1.1584091551.1789355030\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 13276\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:50 GMT\r\ncontent-encoding: gzip\r\nx-request-id: c1915cf1c53303cc6aa76417\r\naccept-ranges: bytes\r\nlast-modified: Thu, 07 May 2026 03:56:30 GMT\r\netag: W/\"69fc0d6e-9a93\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: bCLxVMBIlx9w8rKQj7ZIIQ5gjXLtwMY71V6Hsv9Jg9Rt8SlhliXD5g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39571,"size_decoded":13808,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1619)","md5":"fc980c40f24817c7366dd301ae9a6574","sha1":"9cf56f94deef9a085b85b80029d5b4b8017f3a5a","sha256":"b353a661a0726c9bcbbda85b72bab0d9af1e7adfc267dce98d84fcb61763ba83","sha512":"fe1b78f1ae21f7af4d9e9318cd9bb5f01effadb5576f7034220bcca9e3fb26d7787fd40c64b06bedd49c7a7e78133e4525159a9dcd280ad3035d5d088f708b86","ssdeep":"768:AWL79DxTqgH92F95edSGCuaUCwtcXK6b6+M3Zzz2yCK:dhL92gSGCKxtcXipzn","tlshash":"3f03710b76f02530921bb172195fa5087136a42f4e46fd443d4c92a88f6d93cabb6fbc","first_seen":"2026-04-19T07:09:17.014336Z","last_seen":"2026-09-14T03:04:38.102208Z","times_seen":166,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/upload_01/xiao/20260912/2026091215470483033.jpeg?auth_key=1789360074-0-0-4f731b0a426b8dfc1915171c49588859","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.315Z","timestamp":1789355031315,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /upload_01/xiao/20260912/2026091215470483033.jpeg?auth_key=1789360074-0-0-4f731b0a426b8dfc1915171c49588859 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 92912\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Sat, 12 Sep 2026 07:47:31 GMT\r\nETag: \"d458351005d37025c41ccfa0d8019fdc\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[2],EU-BGR-sofia-EDGE1-CACHE1[0,TCP_HIT,2],EU-GER-frankfurt-GLOBAL1-CACHE11[12],EU-GER-frankfurt-GLOBAL1-CACHE7[0,TCP_HIT,11],1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2438858\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 1d16f49e0d36e840614e7d1b55f42e5c\r\nnginx-hit: 1\r\nAge: 153142\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":92912,"size_decoded":93811,"mime_type":"binary/octet-stream","magic":"data","md5":"d458351005d37025c41ccfa0d8019fdc","sha1":"b21977f51740f423fc8e39dbd58971be94631369","sha256":"4a07080ac5bf76cce127c53d8d5213835244c70fb605bd0937550cc40aa4d3bf","sha512":"e2f475634c0e27ac7925c52d30c8e4c6210d3450d97b067d4d3eb7db966a067959fb58572131cb1977bd37c0ea8c290e133e46d8ab672dd34f59f8078fe972b7","ssdeep":"1536:gLaCSY4orKdsqBjGKphFgACXkRes/RKZrHjoqvhhnwI49caxy58ReD36i:MQorKffBFFRFKZrHNhhwI499y58ED31","tlshash":"6a931291ed411acdab50b57d2944c70076ffa6eda0be4ef1fc43aec0a2119d626d0bc6","first_seen":"2026-09-12T09:44:15.075488Z","last_seen":"2026-09-14T03:04:38.102782Z","times_seen":4,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":762,"dns":0,"connect":0,"send":0,"wait":56,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pic.zdmhyg.cn/hc237/uploads/default/other/2026-09-11/4428c7feddd07e5cead90b2646aff0f6.gif?auth_key=1789360108-0-0-0c5495d744c97e9a31c35084839a3146","fqdn":"pic.zdmhyg.cn","domain":"zdmhyg.cn","tld":"cn"},"ip":{"addr":"38.54.26.72","port":443,"asn":138915,"as":"Kaopu Cloud HK Limited","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:51.362Z","timestamp":1789355031362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zdmhyg.cn","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 01 Sep 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:61:C2:D8:CD:0E:1C:90:71:02:DD:39:47:DB:9E:6A:90:8C:81:DF","sha256":"F3:68:40:1E:63:34:34:1C:0B:93:95:3F:23:F5:48:8B:29:1C:30:29:F7:19:AC:8C:A2:BE:AB:DB:7B:93:43:82"}}},"request":{"raw":"GET /hc237/uploads/default/other/2026-09-11/4428c7feddd07e5cead90b2646aff0f6.gif?auth_key=1789360108-0-0-0c5495d744c97e9a31c35084839a3146 HTTP/1.1\r\nHost: pic.zdmhyg.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://beat.diyzxcw.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 03:03:52 GMT\r\nContent-Type: binary/octet-stream\r\nContent-Length: 43120\r\nConnection: keep-alive\r\nServer: openresty\r\nLast-Modified: Fri, 11 Sep 2026 13:08:00 GMT\r\nETag: \"dfe015d90ae2ecf84c6a0d0f1025ad91\"\r\nx-amz-server-side-encryption: AES256\r\nX-Cache: Miss from cloudfront\r\nVia: EU-BGR-sofia-EDGE1-CACHE2[1],EU-BGR-sofia-EDGE1-CACHE2[0,TCP_HIT,0],EU-GER-frankfurt-GLOBAL1-CACHE10[19],EU-GER-frankfurt-GLOBAL1-CACHE14[0,TCP_HIT,18],1.1 c9499008aa7e1acd11e9fbc171281d82.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: FRA56-P4\r\nAccess-Control-Allow-Origin: *\r\nX-CCDN-Expires: 2369296\r\nx-hcs-proxy-type: 1\r\nX-CCDN-CacheTTL: 2592000\r\nX-CCDN-REQ-ID-46B1: 5bc9cd7c558f3fbe1455e1a069d691f4\r\nnginx-hit: 1\r\nAge: 222882\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Methods: x-cdn-auth,x-cdn-app\r\nAccess-Control-Expose-Headers: GET,HEAD,OPTIONS\r\nCache-Control: max-age=864000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":43120,"size_decoded":44020,"mime_type":"binary/octet-stream","magic":"data","md5":"dfe015d90ae2ecf84c6a0d0f1025ad91","sha1":"159d704e207bd48cf4fbb0234a1d528d1c5e35bf","sha256":"8714e6537b7902f3828249ca11b5828c9330dc789cd5cddf9aa76632a83d9b7e","sha512":"1e0674aa97312037ca5d72e5b7c239eee5aac075a37f78be58763ef0b0703a847092757932faf1adaced40ebc73e6e85dfa3275c59781ae89b8b7f54aa708c2b","ssdeep":"768:xcXySFnknQtmxPDTBbUqTqXLegWEKDOzOltTknvXGk46t0zuyOj4cdqxDf:qCSFnntmx5AfSDEeOCldil0zG38Df","tlshash":"871302428e0d9d05b749e5869dae66cb3cdba5106b34fa2e5397763c6b043b7eb43200","first_seen":"2026-09-12T09:44:15.106904Z","last_seen":"2026-09-14T03:04:38.103934Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":1206,"dns":0,"connect":0,"send":0,"wait":50,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"pic.zdmhyg.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/images/search/sr-3.png","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:49.805Z","timestamp":1789355029805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/images/search/sr-3.png HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1762\r\nserver: nginx/1.22.1\r\nx-request-id: 5e8cc99959d96c666aa6829f\r\nlast-modified: Sat, 30 May 2026 07:42:14 GMT\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\netag: \"69fc0d35-6e2\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 2YHkXqQPvc5xe3jytnyhvED6gsgGBo9nlYtmShQnAl-IFwMM0iLaww==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1762,"size_decoded":2259,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"1fa895be147372bfdac31ba51ad6180e","sha1":"01a0049414c8b9495c27e00b69df474cb0afed82","sha256":"1555f3cc80e4d3a5cf28344fb4d3482bb76b8632b47df7dce12cfca2e0c6cd98","sha512":"ac19f9dc9ba657c40734dbd055d38873fee5e0f403509b60145f55d6af9e65e66e450f31d9dd5f0ecdd8099159403b03a40352386331383cebb562ff9a81e946","ssdeep":"","tlshash":"cc3109eb354c979d4b64243c00824a165bbba07a33a958167973a4809f3fdbb5ac2540","first_seen":"2026-01-12T23:00:02.169495Z","last_seen":"2026-09-14T03:04:38.105606Z","times_seen":646,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beat.diyzxcw.cc/static/web/icons/icons.svg","fqdn":"beat.diyzxcw.cc","domain":"diyzxcw.cc","tld":"cc"},"ip":{"addr":"13.249.8.97","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://beat.diyzxcw.cc/","date":"2026-09-14T03:03:50.012Z","timestamp":1789355030012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.deoccma.cc","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 17 May 2026 00:00:00 GMT","end":"Mon, 30 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:E4:C3:23:CB:A7:8F:B3:35:0B:A9:59:A0:11:E3:CC:D0:3E:6E:62","sha256":"46:7C:7C:4C:E5:D3:74:96:33:D1:D5:FC:CB:BC:02:7F:E5:F0:67:4F:29:5C:A2:3C:9A:80:24:C1:95:82:62:99"}}},"request":{"raw":"GET /static/web/icons/icons.svg HTTP/1.1\r\nHost: beat.diyzxcw.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://beat.diyzxcw.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 11587\r\nserver: nginx/1.22.1\r\ndate: Mon, 14 Sep 2026 03:03:49 GMT\r\ncontent-encoding: gzip\r\nx-request-id: d724176460a321e26aa76416\r\nlast-modified: Tue, 02 Jun 2026 07:02:32 GMT\r\naccept-ranges: bytes\r\netag: W/\"6a1e8008-7d85\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 bfe91ac995022a57c1fc8f12ca50445e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: sZdblcQUC4zvd8zVOkglqJSGgx_oBZ63Wt-BsoDY6XilKcXHYQvVtQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32133,"size_decoded":12110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56a3867c680b2770a44cd7eaaf7f5107","sha1":"09fb75d7e61ad195984c72a7859af79140393bbc","sha256":"f9a5bb89f3322897bb7e467b75fdcbaeff6fd9f4c39d01422976af03ca9aae45","sha512":"2f73fbe782546eef2b3991d2f2cfa4e40cc1fe42a4414e6c10133662ae4228ea4b5bff0313f7bfd436ea03174e2b0b9a12a7e472b29d054ad612953a588a069d","ssdeep":"384:oRtthcCeuZT68nxANMwzTQrdZSPNBDl/IWtdOl+9RXH/3Ulvg4wh5fnMz8pGCxh2:uXE86d0RoNBDGyGYH/3UUfnWshSjE23","tlshash":"2ae2a6e9932c45dc9447c63dff797132532fa0fa30d845aca99e4b38a2931dae517e80","first_seen":"2026-06-03T23:45:32.773642Z","last_seen":"2026-09-14T03:04:37.96118Z","times_seen":96,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"beat.diyzxcw.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}