{"report_id":"19b080f6-9c3f-4084-b465-826693d2ff8d","version":6,"status":"done","tags":[],"date":"2025-11-21T02:09:45Z","url":{"schema":"http","addr":"vxq.bht8.bond/854881.html","fqdn":"vxq.bht8.bond","domain":"bht8.bond","tld":"bond"},"ip":{"addr":"104.21.40.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"title":"正在播放:快手网红崇洋媚外与老外肛交泄密突破-高清国产-百花堂","dom":{"size":66634,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29157)","md5":"ccc939b5bd29019d8920e15da80f9376","sha1":"6fe2856c9a64eaf5f6f4f9267b84a3c0a5e9c51c","sha256":"04b5c953de31d4e69774a9364f7cc3377c54bbc28a29c5ebff975c6853d531b4","sha512":"de212971cd5809e87268d86cb3439909c1a347d0a4efa6938e1128d33e9b99aa02dffd006cce9b22fafe056e85cf91382f2be3b82e510820b6bcc9923ed57f4f","ssdeep":"1536:DghIbBGvaXOgBL9hQvHgBL9hQvrV6YCwZBEF:2AL9hQvAL9hQv3EF","tlshash":"2a53e9b253e4747a720711d4d960bf59b063461fcaa38e06f3fcbf6ad748d89982244b","dom_hash":"domhashfd8103dc9d24247da87b0c1fddc54d32","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"vxq.bht8.bond/854881.html","fqdn":"vxq.bht8.bond","domain":"bht8.bond","tld":"bond"},"ip":{"addr":"104.21.40.24","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-26T02:09:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"pic17.havzy1.com","ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-21","domain_rank":0,"first_seen":"2023-07-25T04:29:59Z","last_seen":"2025-11-17T09:33:06.064366Z","alert_count":0,"request_count":1,"received_data":22814,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic13.seaige.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-09","domain_rank":0,"first_seen":"2025-04-04T07:52:13.366797Z","last_seen":"2025-11-17T08:47:16.488215Z","alert_count":0,"request_count":1,"received_data":52990,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic16.havzy1.com","ip":{"addr":"104.21.64.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-21","domain_rank":0,"first_seen":"2023-07-26T04:09:52Z","last_seen":"2025-11-19T03:21:17.765632Z","alert_count":0,"request_count":1,"received_data":13574,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic15.havzy1.com","ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-21","domain_rank":0,"first_seen":"2025-05-08T22:09:06.832427Z","last_seen":"2025-11-19T00:41:41.723078Z","alert_count":0,"request_count":1,"received_data":22016,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic17.anzise.com","ip":{"addr":"172.67.222.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-18","domain_rank":0,"first_seen":"2022-08-09T20:01:34Z","last_seen":"2025-11-15T00:52:21.18094Z","alert_count":0,"request_count":1,"received_data":11902,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic16.xne33.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-18","domain_rank":0,"first_seen":"2024-02-21T03:01:05Z","last_seen":"2025-11-19T02:36:19.442286Z","alert_count":0,"request_count":1,"received_data":25401,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic22.msn87.com","ip":{"addr":"172.67.159.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-18","domain_rank":0,"first_seen":"2024-02-21T04:03:38Z","last_seen":"2025-11-19T02:47:09.712193Z","alert_count":0,"request_count":1,"received_data":10087,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic19.ysj77.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-18","domain_rank":0,"first_seen":"2025-04-16T17:48:20.958926Z","last_seen":"2025-11-21T00:41:01.508547Z","alert_count":0,"request_count":1,"received_data":19238,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vxq.bht8.bond","ip":{"addr":"172.67.174.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-09","domain_rank":0,"first_seen":"2025-08-24T07:47:05.807692Z","last_seen":"2025-11-19T03:04:30.43806Z","alert_count":0,"request_count":1,"received_data":45848,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.bht2.mom","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-07","domain_rank":0,"first_seen":"2025-11-15T12:32:45.753455Z","last_seen":"2025-11-15T12:32:45.753455Z","alert_count":0,"request_count":24,"received_data":3721139,"sent_data":11748,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"pic15.xne33.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-18","domain_rank":0,"first_seen":"2025-05-09T02:41:08.217001Z","last_seen":"2025-11-17T09:33:05.477374Z","alert_count":0,"request_count":2,"received_data":29919,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pic16.seaige.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-09","domain_rank":0,"first_seen":"2025-05-09T02:41:08.203079Z","last_seen":"2025-11-17T06:54:17.53138Z","alert_count":0,"request_count":1,"received_data":9692,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pp.xunboe.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-12-21","domain_rank":4234616,"first_seen":"2025-06-17T06:55:26.130252Z","last_seen":"2025-11-09T08:36:52.556854Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":896,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pic19.msn87.com","ip":{"addr":"172.67.159.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-18","domain_rank":0,"first_seen":"2025-05-21T14:11:42.014635Z","last_seen":"2025-11-21T00:41:01.849762Z","alert_count":0,"request_count":1,"received_data":33623,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/js/mytheme-ui.js?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d3f21f26421dd3818d79b448397309","sha1":"430f25ca4745e07af7ce9b5aa2b10500b43dc03d","sha256":"c58966ca6f143902109c74f37e20c99aa14ae0627385ab4f669a63a3fa80ccc9","sha512":"bcaaf6abb24722b8367a6022ee2a44a16d96611b9288ffe3590cedbc6b7ddb0d790f6c557c4cf13f61d77c8a7fc58dcdcf171cf58fbae4c14309733bd31911e2","ssdeep":"384:CLZh6VcdRGytUSVCE3JHvdjqvNpvNa9xUR7xu4:uZh6VURGytUSVFZ1mvNxNa9xUR7xu4","tlshash":"b0c2e09832f6d4f7478e1b33af81bac6a0725c2216bd62b3c71bbd4815dc501c6d6c66","size":28090,"data":"","first_seen":"2025-08-19T02:52:00.634778Z","last_seen":"2026-04-08T23:50:34.256763Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e936a9c08896544f17c40d337de7d482","sha1":"2b122cfa8c85696e2bf4b33aee2bcf351a80db38","sha256":"58fdfd9ee19ed5b938a979e5f237c3a520d2b84fc9563d17f381636ef92d4861","sha512":"d84a7f7e8f421886f090db4e841a618a31bf1d9a28f78a2f6463a9d3bd4ef47f2b16cd8d675eafcf064f4ea3fdeb972663c09797c173c14c05a9a94f05a2d7f5","ssdeep":"","tlshash":"dd017d06e3907a9a30b9b3b7c21e3e1a27803c129390d27cbca1411f4cd5d00df4200f","size":678,"data":"","first_seen":"2023-03-14T00:46:34Z","last_seen":"2026-04-08T23:50:34.308574Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d784a3ac7bef0efc43d4e8215083ccf","sha1":"6ef5054e9b6f183a502cae427baa7d5482db084c","sha256":"9f7da37444581b8825bca89e6046bfa0386ec88c786a7e5dbd3302913d989fc6","sha512":"98f8af1e486d681be19c0bb08a6ffc2f3a37180832abf58756148b8fa068a1bfed3d262f15446ab0286e8fae8b2efefb4df1db06659e89dc0b277f31cdfaff68","ssdeep":"","tlshash":"ffe0e526a5c15809495b7371e8ce05855775780368514f1cc00ad832afe91b8687fadc","size":403,"data":"","first_seen":"2025-04-02T02:40:05.557205Z","last_seen":"2025-12-10T14:10:20.947748Z","times_seen":4050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"768112690e520808390431f9e5bb9caf","sha1":"ebeb98c14133655584edea0cbdf55c4a9dcfec56","sha256":"ab8fd03f9d75649a02dcdaa5e93e75be033a5b3227aca070cc31d2d028e44909","sha512":"a8ecd8c29a38c5027cc466083e4a3343befd8c6941ee03e3685fdc226d74115e56569177bc65653fa40b3dde2e817c3c736465cded4cb2ad1e81f4b83a988a9b","ssdeep":"","tlshash":"a2a024d70401503d15d31131c5033c441337007c045d50405013445034f473f010f44c","size":78,"data":"","first_seen":"2025-11-21T02:09:49.947686Z","last_seen":"2025-11-21T02:09:49.947686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23c51362994216a19365a720eee0c622","sha1":"59dfb1b3c70a73f3535d97365e664aa84f8a4780","sha256":"d4617fc174b73664b14f1d7ee828d9fec654f7f834af4d5230a37c5de9e90f62","sha512":"fe134631d3d036c04b1b3b537f5ac1ce6a490fbf12f8c23e6e14f147bbfa0595c48e216e1daef407689f748e1f865dd327713656536fe9c6d71e25cc4d81fd9d","ssdeep":"","tlshash":"6df05c923d65703edec4d1d6128b7704a032e50234841f23882e791e82f0c7bf21d1c9","size":454,"data":"","first_seen":"2025-11-21T02:09:49.949341Z","last_seen":"2025-11-21T02:09:49.949341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/js/jquery.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-16T20:55:58.41547Z","times_seen":61915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/js/mytheme-site.js?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4665a55e342cb0dceeb7dec86a8ffee5","sha1":"81dd01cb52acacf9f39c143b11cfd79130f473fe","sha256":"27d2ed418a3b205f73c798d94d71922523a2a3eff5c944fb6674f82a57dab88c","sha512":"56817132e0e5bfd18c725a8e6e0d28380c10c1066ca6e9cdcfb77e8a08e4391797cd9bd363ea692fab77b4dfb3e5849de7136e54130604a60e0251ce773a51b3","ssdeep":"3072:qzN9j027ioFThP2V/93iYbtIVaZTegpNEJMgd:0XjRi5pIVwTegpNEJ3","tlshash":"bfc3e949b2513532429fb1e6512f420fb276646e680580bcb9b8dce66dbcc8d707bf78","size":129158,"data":"","first_seen":"2025-08-19T02:52:00.684211Z","last_seen":"2026-04-08T23:50:34.249355Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc63fc9c04a0da5f5763c60cbc1e90e9","sha1":"145e856e99b40ef1354549a2101791049f74e3c2","sha256":"6663a3e3475ff6b182a3832721eb6134c6794e35c7300065016f18fd4c72d08b","sha512":"578fb8fcaf99a26a8b538bf4e3f976be4764d97b9f020c1b44ee5e48bbc0e51be1e2cfcfd3f69435a16e60cea76f33801f329ccbe60e2a49c653c58fc61f5c82","ssdeep":"","tlshash":"3f0123307194b06550e21538acca17d8b2b17d032b92550cc04ef920f5ad96da07ffd0","size":849,"data":"","first_seen":"2025-10-27T03:36:28.676879Z","last_seen":"2025-12-06T20:47:16.347498Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/player/dplayer/hls.min.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cfa29933ba9ba506ea73e084de951b9","sha1":"30004f2da2e1e06f671eb2bfda00f8bcbe69b47b","sha256":"0d925ef64b764ee2d8e362ebec98668e5fd09887ec0fb70bd82d121097c40d7c","sha512":"5e7b2ea8fd8b8edca2554f5423cde03bcc8934fb03904259baba2bb9e51ae98af837877ea0223016c71660bbb418543667ecfdfc1b4831d513d57a4ff886915e","ssdeep":"3072:pI5L1S8HY5x1kVQ5ToDOzBPCB2baeBSZ3yg:pI5xSCY31O2oDO15tS","tlshash":"53341c9db661706543c3a1a5803f061a7236b92e7409c1fcfa6bd5f61cb885e603bf78","size":241648,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-16T20:23:58.254789Z","times_seen":14126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57ca1679beecd06eaa00944bec96c8d5","sha1":"90d2c545a94b7fa7ea2a0bb2e79d47db91cf7164","sha256":"7c766318d776596c427c9707337cc501d4a06a8186257b80a24d129fc3b97d42","sha512":"971021ae72ea21612944d42c4b9048028e447eb31df65c34a3311c1a6246773b9d8465eb20cb52c6b34099d5a7a714d791cd2eed9323764eed0b3addd104aa6b","ssdeep":"","tlshash":"27e07d9a8841d2e6d986b3bbffe0d368e8983b193817d83207101cd6221336fd446b4d","size":332,"data":"","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-04-16T19:31:21.241256Z","times_seen":9188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/player/dplayer/DPlayer.min.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09d64431d4e71dd79e0293cb254a58bf","sha1":"4093ba933f60bd05c3a482433b2f2b4bf48cbd9a","sha256":"9b2262ea70b613bb5eebbd14963a84c8aa3903cf99f2e0fdd33cae11b1f046d6","sha512":"35ca04e32808ccb3dca2ba6702aa21fa9b26874fc8ceeb44d0f11821f39e1f65288ef2c72fccda8fa18248d84ba86a2a9e835e66454e127fee8ba3261fe5f218","ssdeep":"1536:mDLwEEYwSIZLZX9GSzlY6G4nX8yWLo6DJCYXoanq60IsgGvHk:+PwdJ+St+AXGv","tlshash":"28b3d7983394e071029365f4c51f16093232627de986a658b63ceeec8fb8c8d6537fb5","size":114364,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-16T20:23:58.269Z","times_seen":11372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72d11d47c0c96c0fd1e85fa388aa14d8","sha1":"9d0e7892625a01c435d07e748e394aa571178f3a","sha256":"fc0c736ad34adf8282fb3e12bfc3918e4df585a3f4d17908ec457196e958d03a","sha512":"bab2e5fa2fda22be1e9ffc3b31597e9575f942e8f745ab69d0a3db8426db709a58b2d8f036a6e0666269bd0c69a72f1cc70be644cd93b91417128bfc080ec2b3","ssdeep":"","tlshash":"7cd0a7198c60e3ea9952b39dff80e7a1cc047569364398754350189132270aff548b0e","size":243,"data":"","first_seen":"2025-11-21T02:09:49.952405Z","last_seen":"2025-11-21T02:09:49.952405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/000/report_error_video/script.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b9ec7394b9b594781565f4ffc0f7301","sha1":"c5faab0ed52448c2d2af67f89d5c167c32fc9a78","sha256":"aa6ecccaab5ef50d153867b084d7df600be425b8cddea46fa79baba8e61d5247","sha512":"88a2924e5753b36a1eb551101f002b84ffa597617a9987c2c0d7ebc3dcbf832a9b3ed581ed9b5462cdefe3a323c94e2da58074dd2a3542af6bd695febf33b055","ssdeep":"","tlshash":"0a3113bb646f252245ebb15007db7a043531228fa805ed217d3dc7c40fdadb420e66e7","size":1698,"data":"","first_seen":"2025-04-18T23:46:35.112204Z","last_seen":"2026-04-16T19:31:21.234153Z","times_seen":7044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-16T21:12:05.038717Z","times_seen":615578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/player/dplayer/DPlayer.min.css","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/DPlayer.min.css HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roUnpQH3%2FQvNnzla9SydmC0nUJ0MVYwQJIamDGJ%2BmLM4HqW%2B%2BFfR4%2BKx6XoeuDTOKRv7K0Y4riWMWwAhhDraMr23ByCrgLdpne0%3D\"}]}\r\netag: W/\"5d2996fc-ac8c\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d82b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44172,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35598)","md5":"d3c6a2fc18c932411a9d5bf59de343f7","sha1":"bbfcb2564dd7643cf54c27e464de586cb3ef0b8b","sha256":"d444e7a8144bfd5ae078141c64d855c9c89cc1482dd6e8085fb5cf76dd84bc9e","sha512":"2d1d999c64131687af46743e502022e8c7a7be1e240e17a0233a32c186609f559e6d01822e99dfaa0dc43f07aee6fca5a1c36bf4e4bbfa89a6eb80d6d5f36380","ssdeep":"768:7FK8KSkZqtIfw3YH4ZqtIfw3YHMVHYr/hizxdUDr5+qsGif0y9g:wHYr/hizxdUDr5+qsoyg","tlshash":"5213bc1618a5329891225b91cbc8676c6738d312e9224f8ff31b780ecf8e69d215ff57","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-04-16T20:23:58.243613Z","times_seen":11033,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic15.xne33.com/pic/20220302/6519ac11de0cac94225e74a7cbfaf0e2/1.jpg","fqdn":"pic15.xne33.com","domain":"xne33.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xne33.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 16:11:20 GMT","end":"Mon, 29 Dec 2025 16:58:08 GMT"},"fingerprint":{"sha1":"49:C9:74:7B:75:A0:DC:E0:53:38:36:AF:1F:2E:18:03:49:FF:83:D4","sha256":"D8:82:91:36:75:91:FD:28:79:F3:5B:D3:E4:1F:8F:58:41:11:BD:23:24:87:0F:FD:26:96:E2:B9:72:54:A3:92"}}},"request":{"raw":"GET /pic/20220302/6519ac11de0cac94225e74a7cbfaf0e2/1.jpg HTTP/1.1\r\nHost: pic15.xne33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12392\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Mar 2022 19:04:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"621e6e22-3068\"\r\nexpires: Fri, 28 Nov 2025 19:25:18 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hu%2BhhGzzkmBdSVRDAYedmTTDKBVgLtqBh%2FMrwYT6olmkrrVkEqj3z53RtPTvaWqo9aZOuzTe4%2B1WtdBJV1%2FoZaZxWEG0V5KLksjQ6mk%3D\"}]}\r\ncf-ray: 9a1ca50e9b2b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 270x480, components 3","md5":"482eb803f7e246d4a2b7b8f27a082b19","sha1":"05c02bd6bbbd197b364c1ce10075991dcc3af13a","sha256":"41cb405447b3f8dc270fb2bb0d5ab2d27eb3d8e9097fc50cca54ed5a8fa56c16","sha512":"78758cc1a4795a19603a534fa5a6af2eeb3877d5440dad2593c8d85f21b0a9c61b64330ee31dc945ec339b6ca200e50cbaa60d674c1a696c4c801939fb663526","ssdeep":"384:YrnKKfIdfmGjZsgEqbgd4Cz7ovZBhnoChcSg+D:YrKKfAfmGjBrJCXQ0a","tlshash":"ec42bf6e9761873aefbdc1bce01ed80aba0cfad917247915c675176d16c60490802fe9","first_seen":"2025-10-08T12:52:11.208531Z","last_seen":"2025-11-21T02:09:49.891242Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":45,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic16.seaige.com/pic/20220307/5d339c04cd7bcb13b12ce83d2f562e35/1.jpg","fqdn":"pic16.seaige.com","domain":"seaige.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seaige.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 07:03:03 GMT","end":"Fri, 13 Feb 2026 08:01:35 GMT"},"fingerprint":{"sha1":"29:F5:A0:93:0F:7E:92:3C:35:83:61:FD:0A:53:2A:82:A3:70:D5:58","sha256":"59:01:6C:43:E7:F6:CA:0F:A0:77:5C:FA:C6:60:45:D1:A0:D4:48:B6:BA:A8:1B:43:85:DF:AA:31:A7:D6:C4:72"}}},"request":{"raw":"GET /pic/20220307/5d339c04cd7bcb13b12ce83d2f562e35/1.jpg HTTP/1.1\r\nHost: pic16.seaige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8918\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Mar 2022 22:45:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"6225396e-22d6\"\r\nexpires: Tue, 02 Dec 2025 21:29:20 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHGdofyCwOhtaebG8qAMZhPwDI0g9R%2FIEBcN2seOrJFERV%2BFKC2k60wvBD5nE7EA8V1rjlrGmI6bhESFglrXWt8scQ5Xlnv4dQphJh8j\"}]}\r\ncf-ray: 9a1ca50f0bee56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8918,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density -20135x-20176, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x547, components 3","md5":"286b8134c618efc5b7615b9a97d54597","sha1":"4dc9c05adca9e44e867d14bee3799b5a8c6189a9","sha256":"06dcb76ca4e88861ceef6bc9b874e422ed43614d218834181359d66337f54da7","sha512":"f9dfec0dd4089641b2c3037af908a374694c7f74bf3eedfbc80d6f8bf091bcc00fc4d552dedd836ef53931d87cd39797eb0caf2ebac4bb532a267024311c21b5","ssdeep":"96:gu1UyXjF/p3c3nDhPzFpop3rXaik2vVn5VL9JmL4BLr+IissssssssssO:znXZx3c3nD1Fpop3LaiFvJmo+Y","tlshash":"250252acc3a9b87ef65430b177591d1a3f6a941e1b42f0b66b7247280865fe602d9830","first_seen":"2025-10-01T10:17:47.927043Z","last_seen":"2025-12-20T12:01:30.90589Z","times_seen":4,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":99,"dns":10,"connect":4,"send":0,"wait":8,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic15.havzy1.com/pic/20220304/feda48af7b575f2fff03ab154416d707/1.jpg","fqdn":"pic15.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havzy1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 19:23:49 GMT","end":"Fri, 23 Jan 2026 20:22:18 GMT"},"fingerprint":{"sha1":"F2:DE:65:F9:E4:F5:BF:9E:21:50:9C:EB:08:59:C5:FA:E1:05:0C:68","sha256":"73:0F:EC:CF:71:5D:20:C0:06:D4:89:73:47:1E:80:74:08:40:39:7A:98:6F:D9:5E:60:C1:59:1C:E5:3D:07:5B"}}},"request":{"raw":"GET /pic/20220304/feda48af7b575f2fff03ab154416d707/1.jpg HTTP/1.1\r\nHost: pic15.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21235\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Mar 2022 03:04:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"622181a2-52f3\"\r\nexpires: Fri, 12 Dec 2025 22:40:40 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhGgS%2BPrfVlv2AoDnKDwkbedYmNKzINlk%2F9K4v8RX7hqpnKkH62IuDlt1SSoek39VGCzZaJWcJ7vtCw30nzHYjAGD6OeJurnb4tvU8bB6NA%3D\"}]}\r\ncf-ray: 9a1ca50ef8fbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21235,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 853x720, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x480, components 3","md5":"4162b201542a9b9e4f0a9a39cacbadfa","sha1":"94d502061d7c5b8ac456717376288ff0fb7dd66b","sha256":"fffee07992658cb3c1b98a692c8c7b8acc32f722127ed3f20a7f6e0e7f184a27","sha512":"a31c929a04f52454e177b4575f7f14496ec837d3fe5d9153bf3f34ea488f89e321547b10d7af8950e4510e05b9e780b94f0c6e019ff94ffd5e8fc955cfb91f26","ssdeep":"384:gV8Jzuzg82KoyhULjryI5z+NLj2+b6VWMjZUsPRPFQfLA+ui4Ab:gyHKRUL71d+OXZ156DqiPb","tlshash":"ba92e1f5ea2daccddf690d7d741732cc371c3e0684954c0a516248b8c90b579c5be275","first_seen":"2025-10-01T10:17:47.782288Z","last_seen":"2025-11-21T02:09:49.897193Z","times_seen":3,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":93,"dns":10,"connect":4,"send":0,"wait":7,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic15.xne33.com/pic/20220305/3804ad4bf7b42319fe1e56e88a7875ae/1.jpg","fqdn":"pic15.xne33.com","domain":"xne33.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xne33.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 16:11:20 GMT","end":"Mon, 29 Dec 2025 16:58:08 GMT"},"fingerprint":{"sha1":"49:C9:74:7B:75:A0:DC:E0:53:38:36:AF:1F:2E:18:03:49:FF:83:D4","sha256":"D8:82:91:36:75:91:FD:28:79:F3:5B:D3:E4:1F:8F:58:41:11:BD:23:24:87:0F:FD:26:96:E2:B9:72:54:A3:92"}}},"request":{"raw":"GET /pic/20220305/3804ad4bf7b42319fe1e56e88a7875ae/1.jpg HTTP/1.1\r\nHost: pic15.xne33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15959\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Mar 2022 20:28:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"62227652-3e57\"\r\nexpires: Fri, 28 Nov 2025 04:01:04 GMT\r\nage: 54859\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2a9mTwB0boIsQiHiBXve3YfQi3tkgb%2BXHNtHnZnOpwZoAVxyJ61KQ8FDsafNmWL%2FQQzaTT32OFj%2B%2FQE4%2BfIxC%2FnkJbgV621nkxUVXE%3D\"}]}\r\ncf-ray: 9a1ca50eeb3956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15959,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 406x405, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x406, components 3","md5":"01dd8888bb4668cc7d4acf0d749f9333","sha1":"942b8750c42014c2c4dfd4c7d5a9cebf355b17b6","sha256":"47399d9b51e6ae8e9afb5ff29892552396bb400fd262aeef7e68022d39c34635","sha512":"a69e364dd5bdba3020af931995425cac4bf7e1991652e720303ad84d4e782cffda7b4bb378d0983963736402a868786624531269f9a75691abca0afc44a2ffd9","ssdeep":"384:D8iwaAuP9bq31HcKRImQlY0gzrUZZ5/NBRwsuc/B6:DmeVbCFtnnzyn0","tlshash":"3062c1472c136bb5e04dd17cc0f2935c3127b6687c63181a21c9f4f8b5a27bea804eb2","first_seen":"2025-10-29T03:52:07.250018Z","last_seen":"2026-01-21T02:07:39.792438Z","times_seen":4,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":10,"connect":4,"send":0,"wait":11,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/ajax/hits?mid=1\u0026id=854881\u0026type=update","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /ajax/hits?mid=1\u0026id=854881\u0026type=update HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c sSf ])\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GALzPk9tosOMZBKvYeC9Ai94hnu1mwLGAl7jQ9quUhNuWvDvBdzVhhISjhvAL%2B%2FArMBO%2FFAr6qyqbUKQtNdb3KcBSjhej7j2oE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1ca5110e3db4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d21dc47fea963f75ea0d5c0740eb84d","sha1":"3dcfb89f18a6169f3232ac4bda853d173ad2a105","sha256":"b61c983a96b3884c1eb2f088a16adbc448f746c5aaf89c6d4e4b31883f9b3faf","sha512":"eb21b7d0740a775975f42ba35d2c305c082b9a3f367eb5689d3665c654518bc69b56064c4cce2d0bfa9a779c8c49638707aeeeddc904e39ad9c41f641929fa7d","ssdeep":"","tlshash":"97b012471cd402824c494044908c4301416c70042d01a7954989e310814c8e9300d4f5","first_seen":"2025-08-01T18:51:17.769983Z","last_seen":"2025-11-27T05:31:04.773899Z","times_seen":10,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic17.anzise.com/pic/20220304/207c42695bde2b35b8a780d9f1ad42ce/1.jpg","fqdn":"pic17.anzise.com","domain":"anzise.com","tld":"com"},"ip":{"addr":"172.67.222.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anzise.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 18:41:25 GMT","end":"Tue, 13 Jan 2026 19:40:07 GMT"},"fingerprint":{"sha1":"AA:AF:DE:A2:AC:67:E8:FD:B7:59:6B:AC:6B:A7:90:3A:D4:32:02:8E","sha256":"1E:14:FE:02:A1:71:16:6E:6A:6E:11:FF:6A:67:FA:6F:6A:AD:7C:24:CA:14:3A:2F:45:CF:C1:89:A1:40:3D:8F"}}},"request":{"raw":"GET /pic/20220304/207c42695bde2b35b8a780d9f1ad42ce/1.jpg HTTP/1.1\r\nHost: pic17.anzise.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11119\r\nserver: cloudflare\r\nlast-modified: Thu, 03 Mar 2022 19:11:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"622112c6-2b6f\"\r\nexpires: Fri, 28 Nov 2025 13:21:42 GMT\r\nage: 1075037\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaNf1CG6rg1e5alcToL3F9iLhi%2FOZ35i9xPHq3DDYWVpWzJtEJoBiZlaRyojalA1wBaoKiWYOwc1s74Q3wDd8o9wGnL8B623oAs8qB7dVqA%3D\"}]}\r\ncf-ray: 9a1ca50f0f545ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1144x1143, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 270x480, components 3","md5":"eeaff036b969989ff1f9201b0dca5f2c","sha1":"f994b62d0e0f878cfad7c53193db376ba45c6dae","sha256":"4a7129a5bbeadbd81170ad14dd31a18a8f8825d4a8e09ea2138a6017e27ed769","sha512":"5e202dd927a3ef1c7bbfdebbd80761bb04cae16279565da479526198d53d3ba46911067ddecc97201fee65f2f241619fc9beed029331743a8e77a7d1b25bd7d6","ssdeep":"192:AR20lIk5B39oWDu0obl9KDAKdoblg22pu3It56Gg8vjJI6t0lHxF:A80/3SF0obr7lg22AYt5Nvr0VxF","tlshash":"3e32bf2dc2c44247e78715fff61f5712ef258bb3ac438fdd6a242029e6207aea952491","first_seen":"2025-11-21T02:09:49.903883Z","last_seen":"2025-12-20T12:01:30.918644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":9,"connect":4,"send":0,"wait":5,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/000/flink/analytics.php","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"POST /000/flink/analytics.php HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 9\r\nOrigin: https://www.bht2.mom\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 21 Nov 2025 02:09:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMs f ])\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVA0M5q7dYmIohXSjH9PjQc9J4JswlETVXdl2EQqwhniijtAVrvOc7wwfgJJUB3mTOM9Hm0zgFAPS51paSv8QiTViG%2Fek7np1s8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a1ca5110e3cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pp.xunboe.cn/play/Xe0Rlovb/index.m3u8","fqdn":"pp.xunboe.cn","domain":"xunboe.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:26.006Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /play/Xe0Rlovb/index.m3u8 HTTP/1.1\r\nHost: pp.xunboe.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bht2.mom\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic16.xne33.com/pic/20220306/a8ebcc9da2a93c85b62e9b879ec4dbdd/1.jpg","fqdn":"pic16.xne33.com","domain":"xne33.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xne33.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 16:11:20 GMT","end":"Mon, 29 Dec 2025 16:58:08 GMT"},"fingerprint":{"sha1":"49:C9:74:7B:75:A0:DC:E0:53:38:36:AF:1F:2E:18:03:49:FF:83:D4","sha256":"D8:82:91:36:75:91:FD:28:79:F3:5B:D3:E4:1F:8F:58:41:11:BD:23:24:87:0F:FD:26:96:E2:B9:72:54:A3:92"}}},"request":{"raw":"GET /pic/20220306/a8ebcc9da2a93c85b62e9b879ec4dbdd/1.jpg HTTP/1.1\r\nHost: pic16.xne33.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24622\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Mar 2022 04:37:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"62243a6e-602e\"\r\nexpires: Tue, 02 Dec 2025 23:52:28 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0XZZKss6lu6qHz4%2FdvWBkVRXpqz%2FnmF5ecxoqGy%2BXVSMdy0h41P9qcJmTZ1uvwowEOm9crVRu6Tz5ozHGlWICz9PG9CMmZQRZHxXSM%3D\"}]}\r\ncf-ray: 9a1ca50eeb3856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density -20135x-20176, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x547, components 3","md5":"c4bf4b6e22451d1b5605cf012a55afb4","sha1":"682f3c6fc58f875d10ff44cccf36ced8ca5a063f","sha256":"aedac31e4547049cc1fac1e4606c303bbaae15925e19cc9ffd7e6fcb770b9b18","sha512":"15bc31c71ea6077bbd32bba39a9fea003f34dc28216cc228e7b6d2651785d5a92766b57326918ffdbda3dea2e0268ee2567d4b0d8e42f5dca83df8277e18ad83","ssdeep":"768:0malCyppIdQ8OZoA8mCbQpB2Q8vITnxLwk8MWz4NGX3XyCu:dRyQyviA8spBeQTnxLvWzquy","tlshash":"08b2d052afe653b7f76bdd360330d922b61081ed4aa4b5551a1a7e8f1e3ec8c2d09730","first_seen":"2025-11-21T02:09:49.907042Z","last_seen":"2026-04-05T21:58:48.244274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":10,"connect":4,"send":0,"wait":14,"receive":2,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/js/mytheme-ui.js?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/js/mytheme-ui.js?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEQdk9Q%2FOviyD39cMzbmXDHGiJGzRK2QXdhUYPkcY1infbIAQ2gLd0x8P3h5HVFLeKjYGAsUjiWgMn06SjacsJxYod%2FEVC8%2BvGk%3D\"}]}\r\netag: W/\"630f1aff-6dba\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d7db4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28090), with no line terminators","md5":"62d3f21f26421dd3818d79b448397309","sha1":"430f25ca4745e07af7ce9b5aa2b10500b43dc03d","sha256":"c58966ca6f143902109c74f37e20c99aa14ae0627385ab4f669a63a3fa80ccc9","sha512":"bcaaf6abb24722b8367a6022ee2a44a16d96611b9288ffe3590cedbc6b7ddb0d790f6c557c4cf13f61d77c8a7fc58dcdcf171cf58fbae4c14309733bd31911e2","ssdeep":"384:CLZh6VcdRGytUSVCE3JHvdjqvNpvNa9xUR7xu4:uZh6VURGytUSVFZ1mvNxNa9xUR7xu4","tlshash":"b0c2e09832f6d4f7478e1b33af81bac6a0725c2216bd62b3c71bbd4815dc501c6d6c66","first_seen":"2025-08-19T02:52:00.634778Z","last_seen":"2026-04-08T23:50:34.256763Z","times_seen":124,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic19.msn87.com/pic/20220321/4aa18aeb0f2cb838a4d7bbe5edb7bb06/1.jpg","fqdn":"pic19.msn87.com","domain":"msn87.com","tld":"com"},"ip":{"addr":"172.67.159.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msn87.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 13:10:06 GMT","end":"Mon, 29 Dec 2025 13:59:40 GMT"},"fingerprint":{"sha1":"B7:51:4B:6F:51:8C:87:A8:C2:DF:59:79:1F:81:8F:A6:CE:DF:29:5F","sha256":"F4:28:A6:93:79:1F:7A:D7:81:45:73:22:67:3A:6E:D2:80:46:3E:75:EB:56:57:DF:73:EF:54:C5:62:4E:EA:6F"}}},"request":{"raw":"GET /pic/20220321/4aa18aeb0f2cb838a4d7bbe5edb7bb06/1.jpg HTTP/1.1\r\nHost: pic19.msn87.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32847\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Mar 2022 12:04:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"623869b1-804f\"\r\nexpires: Wed, 26 Nov 2025 03:38:29 GMT\r\nage: 32\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpKxwuv0u0213wkoc1thc1%2B6Yb1cQ5CJK4n0qZRXkhURtDGOzJJW79YMemKhaDpx38ZthYczOpmVm1F%2BicYEVZFcRvKLZHtdjp2Kpzo%3D\"}]}\r\ncf-ray: 9a1ca50ebcca56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32847,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 31742x31643, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x406, components 3","md5":"b89f38a89f64277c474b336becae7df3","sha1":"8de54ad8e55384de627fa3cb071da0fc07818885","sha256":"ddc29b509b4f682f1f93d1d0fd3276ccee526c5b0d40b38bb9c262fc651e694b","sha512":"0c650441375a94f8ea879ed9bf8b297ce5d26bfd3c0d3f3fe59321294f76acae7b896bf249e6f3465e8cbf8a9da9cda2e1802050811f3fa2856a520dd9b2f60b","ssdeep":"768:axTNHcNq9NYQvGHa/jehn8AQbclUpQYyp32RJWBeXXYguR29A:afx+6rehopJypIgeXoAA","tlshash":"c1e2f1ce45de124cc20d229efd23968c52d942e36e687bf78cbc957d604653da4e1372","first_seen":"2025-10-30T09:48:03.8057Z","last_seen":"2025-12-21T15:44:49.665468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":53,"dns":1,"connect":7,"send":0,"wait":14,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/fonts/fontawesome-webfont.woff2@v=4.7.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/fonts/fontawesome-webfont.woff2@v=4.7.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-font.css?@v=1.0\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:25 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 77160\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\netag: \"630f1aff-12d68\"\r\naccept-ranges: bytes\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2F9HtNdWjHyoEDy3nBrhxBIyZo9plMqKdWENPh7ROV6%2FXMubt5OYDizlAl%2BR8M7lEqz9IgrW4P%2FHDC3Tzvgioz0qZFJWIHecosQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1ca510ee34b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), flavor 536944672, length 536948072, version 8196.459","md5":"ac1ba8cee61cf180fa988ccf3f0cb653","sha1":"3e386533f79b9889f0bd66fbbed0c1bae45d0f88","sha256":"13b22600fb15e2003058f781a9e72a9d0fed68bafa75e99e14b626758e821625","sha512":"fd9ff708c36de6de3707e699a6abc01f40ee67b493d8dfc25f144c32499f8af64f63a13596f5137e5d46f5b8ba7789fc23d99bee489d28986e23eb5c913cbe30","ssdeep":"1536:/sEbgPfd1PShKQA4T4k8I365vIvSB/9lajyXUA2jVTc:LUnXnHcy/DEAS2","tlshash":"0e7302e63b6d4943e03e641070867e9f104b3ab42fa097a5d876eb7f2322992f71512d","first_seen":"2024-05-30T03:11:40Z","last_seen":"2026-04-08T23:50:34.303014Z","times_seen":127,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pp.xunboe.cn/play/Xe0Rlovb/index.m3u8","fqdn":"pp.xunboe.cn","domain":"xunboe.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.652Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /play/Xe0Rlovb/index.m3u8 HTTP/1.1\r\nHost: pp.xunboe.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.bht2.mom\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/iconfont.css","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/iconfont.css HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 19 Nov 2025 21:52:07 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dm6XIZARWyxsjx49r4UivQtZ10jSHZTmUBet14vzSMlj5Ve37OQ3pL%2BKiuhtRtDMXE9swGqlCjklYfHiEDrmUwIRoh7aC1ZyZSU%3D\"}]}\r\netag: W/\"630f1aff-13d0\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd79b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1533), with CRLF line terminators","md5":"657b09d4f63d96735aab9b37b955773b","sha1":"bfef30e44b1ffb145b9d6052e1e2081a27239ce1","sha256":"6b199492736102ee3448dbe6741f350f2213f1ed41b76a3271d206e22dc2c9a5","sha512":"084ef60087f831895f18b42215b174ce43af869f009c2d81e03393d177a3afcb972704e3aaff6b70dfb4721dad00fccabb0b1e1275a9764d03e81ab688282cb2","ssdeep":"96:3ClFgKLt4ADZfa5VMJdfYA8hjDG3kb8303j/EQ:3Cgst4ADwmA183wEQ","tlshash":"50a1a678be10280da366ab97b57255907f08d80b72084ceefa583074d8ced5942f335f","first_seen":"2025-08-19T02:52:00.727582Z","last_seen":"2026-04-08T23:50:34.242492Z","times_seen":120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/js/jquery.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.js HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Aug 2016 14:39:10 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrDH0sIlAo2npbWjNnwo6oaRcgKFFpK0gj0ht%2Fu8qGGxFcElwfzwZLs0CmtwdT%2BLOAEojRkH899OWRg9a9ESY1i3sXKrACc8K2Q%3D\"}]}\r\netag: W/\"57a3538e-169d5\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd7ab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-16T20:55:58.41547Z","times_seen":61915,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/player/dplayer/hls.min.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/hls.min.js HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5582\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iLKnUtNhyaMkKn%2B%2FZJqYHgZkYIjL3iI%2BptSA2dRyJT%2B2yATZTusVjnBt3H%2FyifzLILgaEJTntJthRuj3drqz7ty%2FJSNtP8fUGJo%3D\"}]}\r\netag: W/\"5d2996fc-3aff0\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d83b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"6cfa29933ba9ba506ea73e084de951b9","sha1":"30004f2da2e1e06f671eb2bfda00f8bcbe69b47b","sha256":"0d925ef64b764ee2d8e362ebec98668e5fd09887ec0fb70bd82d121097c40d7c","sha512":"5e7b2ea8fd8b8edca2554f5423cde03bcc8934fb03904259baba2bb9e51ae98af837877ea0223016c71660bbb418543667ecfdfc1b4831d513d57a4ff886915e","ssdeep":"3072:pI5L1S8HY5x1kVQ5ToDOzBPCB2baeBSZ3yg:pI5xSCY31O2oDO15tS","tlshash":"53341c9db661706543c3a1a5803f061a7236b92e7409c1fcfa6bd5f61cb885e603bf78","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-16T20:23:58.254789Z","times_seen":14126,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic22.msn87.com/pic/20220322/2a3fe9026ecda4e0bf0da281f073f444/1.jpg","fqdn":"pic22.msn87.com","domain":"msn87.com","tld":"com"},"ip":{"addr":"172.67.159.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msn87.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Sep 2025 13:10:06 GMT","end":"Mon, 29 Dec 2025 13:59:40 GMT"},"fingerprint":{"sha1":"B7:51:4B:6F:51:8C:87:A8:C2:DF:59:79:1F:81:8F:A6:CE:DF:29:5F","sha256":"F4:28:A6:93:79:1F:7A:D7:81:45:73:22:67:3A:6E:D2:80:46:3E:75:EB:56:57:DF:73:EF:54:C5:62:4E:EA:6F"}}},"request":{"raw":"GET /pic/20220322/2a3fe9026ecda4e0bf0da281f073f444/1.jpg HTTP/1.1\r\nHost: pic22.msn87.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9309\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Mar 2022 22:15:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"6238f8e6-245d\"\r\nexpires: Mon, 24 Nov 2025 13:47:56 GMT\r\nage: 77205\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqlfuGVkUIDlIWe0GxTpBmzNnt6L2GJ%2BmskDhEz7EZr02VyR0ZMiWjjaBucEKvukOFfyCCjwacwvfdSvYDHupP4PzOP63%2FlZmuFIP90%3D\"}]}\r\ncf-ray: 9a1ca50efce256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 270x480, components 3","md5":"298c0c6b9a9f60a953416c76165600cc","sha1":"a483599eeb607355f0d70c3660c0a77ed15e7c96","sha256":"e3539dadeecdffa6f67a722c7d99c53dbf933c01ee2d01f05e30fa38848f0696","sha512":"8a06bd78efc6e9c0edaf494d5136c74121238f65130b05c49622e5d8b6cc282a99d9c5d6fc2c46a93443640bc3201c2f3a93cf7f9a58691ce977491672307838","ssdeep":"192:uoAkC7GmOktPg7VRuCFD6ln9i8XIt/EZ6KYg07Xy:VDmVcVRuU8V0C6KYNy","tlshash":"6f12ae0f7b6d872f00d10843e2e5897e70478ba9f07256f98485a3a86fd458bcc6dd01","first_seen":"2025-10-30T09:48:03.820787Z","last_seen":"2026-02-08T13:27:20.740611Z","times_seen":5,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":92,"dns":10,"connect":4,"send":0,"wait":7,"receive":1,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/img/bj.png","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/img/bj.png HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/iconfont.css\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 2708151\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\netag: \"630f1aff-2952b7\"\r\nexpires: Sun, 21 Dec 2025 00:36:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 5582\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZkh2n9j1PtG5xoMXcYUj5%2FNPTyb9%2FNIuJAAQDGapOi95YmHkUE3seGNfghGcnUFcU1X15PjhxaiO5KhquVAndaLRrlPZUj9UMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1ca510be1cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2708151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"bc3c8d117d72fb35ccff5f7f32e965f0","sha1":"9b4305b08f37a457badc9e839cb0cd8f225bfabe","sha256":"5b6123b270576207589ddc1e54a64f1aa9329c09151580e17e1eabdf8c95b545","sha512":"47da491b5bb442b820a6d9c369320b8e538d5d562d473695eedba4ceaf5d3fd92e1393c98c12d538a27f91e8547beb8f0f898f44d1861333d8fde08e47221db5","ssdeep":"24576:VJ7cq17lkpLWntE9XH1B6sGS83GnFi+H1DUGVdHCL7eXQ/N2:D7Zkp3RH1BFGpWV1jdiWF","tlshash":"91253397c7a01101728db34ccc601ccc292f796bcb9559aefb976a349c249a367bdbc1","first_seen":"2025-08-19T02:52:00.687965Z","last_seen":"2026-04-08T23:50:34.213081Z","times_seen":120,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/favicon.ico","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:25.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:25 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Fri, 25 Nov 2022 03:52:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5582\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAH%2FjV5jf9gAuJfgDUjvqznwyANEH2ScizdqxvBBjQVZt7XTeYgAEbUdI7JHJ6Ve%2B1ltL6b3d7BSTdI40dtrKL7d%2B3q7s6UKlnA%3D\"}]}\r\netag: W/\"63803c0e-25be\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca5151f62b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58150779896a734d3885ef04d16ede1a","sha1":"11a1e990ec80c9e878eb5a813dce6c2bc7803614","sha256":"bb3e93c984713994206289c9d488e5164c3337d3fba61a09d29daa4f8377ea44","sha512":"09493e11380db14b297a7802462e84cc8756af1b6f744d07063d11cca5a4fe694acce12ddbffd6194c064f1c580415b3e3a919a26248868a7463b989c70b0784","ssdeep":"96:9c5LjL3gXZLM1l6xKmd4UOL4imIEJpU3qKscwL9iDAWpGzPifeRAwoALPYIQ5h+j:szgX5M1l6x5lsGJy6KsX9isrvQE","tlshash":"8412b78605d9a4cadd3e603dc9a6e430351a9e1ee991870308e13f17f7b266a4867c7e","first_seen":"2025-08-19T02:52:00.645885Z","last_seen":"2026-04-04T01:24:02.920065Z","times_seen":41,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/000/report_error_video/styles.css","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /000/report_error_video/styles.css HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Mar 2025 04:12:46 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LoWKoP8PvPnUs%2FlnBszKL0goRWho1a64Ukzl4l%2FYZdymDd4ZDj83HSYvW6K5gfZRxGZJLLHwnZ7yUGpEBuLRiQrC4QFXgIM7%2BSw%3D\"}]}\r\netag: W/\"67d64fbe-903\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d7fb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2307,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c2b40ccda364f88807713e8129d00893","sha1":"2ae21bb81176f74ecbe66b9601b95a960c52baf9","sha256":"fb42142839c81e66c9197a1e374984211ed61acfa8c35099941d2d90a3f9cc74","sha512":"13f89afb453bad6705aa362e902b8a5ad2cd33022d8d9823e6b1d61b5a7973b352291349bf0a53f7ba9b7586740b2da3b80684f05b0669236c79f5cc0e6ba868","ssdeep":"","tlshash":"fe414020d1df9d46b183c1a80bb1da4173ba554bd505fe3c7e8277c04f4a288e0366c3","first_seen":"2025-04-18T23:46:35.101766Z","last_seen":"2026-04-11T08:20:05.792686Z","times_seen":6761,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/000/report_error_video/script.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /000/report_error_video/script.js HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 16 Mar 2025 04:30:01 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDWyt2ShySnX%2BPQopU9P0vJkpLV27ZgJ%2B36EGlt1n74055lU1dEI9tVUM5pbHGiWrS8OjO%2Bffx26foQUa5OvaIH4%2Ft1Qn%2BsaPIc%3D\"}]}\r\netag: W/\"67d653c9-6a2\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d81b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1698,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4b9ec7394b9b594781565f4ffc0f7301","sha1":"c5faab0ed52448c2d2af67f89d5c167c32fc9a78","sha256":"aa6ecccaab5ef50d153867b084d7df600be425b8cddea46fa79baba8e61d5247","sha512":"88a2924e5753b36a1eb551101f002b84ffa597617a9987c2c0d7ebc3dcbf832a9b3ed581ed9b5462cdefe3a323c94e2da58074dd2a3542af6bd695febf33b055","ssdeep":"","tlshash":"0a3113bb646f252245ebb15007db7a043531228fa805ed217d3dc7c40fdadb420e66e7","first_seen":"2025-04-18T23:46:35.112204Z","last_seen":"2026-04-16T19:31:21.234153Z","times_seen":7044,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/player/dplayer/DPlayer.min.js","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/DPlayer.min.js HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEMI%2BrkdeK0CErSbGyMNtI3LvSaUTv8GA7inMmScP%2FySUumlj96QFwNo8jz4RcfFoF2P%2FoMM8fjXhGexwE45RGYPTERToXCKT0A%3D\"}]}\r\netag: W/\"5d2996fc-1bebc\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d84b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"09d64431d4e71dd79e0293cb254a58bf","sha1":"4093ba933f60bd05c3a482433b2f2b4bf48cbd9a","sha256":"9b2262ea70b613bb5eebbd14963a84c8aa3903cf99f2e0fdd33cae11b1f046d6","sha512":"35ca04e32808ccb3dca2ba6702aa21fa9b26874fc8ceeb44d0f11821f39e1f65288ef2c72fccda8fa18248d84ba86a2a9e835e66454e127fee8ba3261fe5f218","ssdeep":"1536:mDLwEEYwSIZLZX9GSzlY6G4nX8yWLo6DJCYXoanq60IsgGvHk:+PwdJ+St+AXGv","tlshash":"28b3d7983394e071029365f4c51f16093232627de986a658b63ceeec8fb8c8d6537fb5","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-04-16T20:23:58.269Z","times_seen":11372,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic19.ysj77.com/pic/20220322/07d308773c40d2531b4d4ebf93f39523/1.jpg","fqdn":"pic19.ysj77.com","domain":"ysj77.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ysj77.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 03:00:14 GMT","end":"Tue, 30 Dec 2025 03:58:57 GMT"},"fingerprint":{"sha1":"C8:D6:31:22:F2:C0:AC:49:F7:FE:0A:60:A2:46:78:23:91:6C:B6:30","sha256":"8B:6B:76:02:64:13:5C:CF:12:93:4E:40:EB:8F:05:50:FB:67:37:CA:1B:F8:90:CD:FA:A7:5C:93:7F:73:81:45"}}},"request":{"raw":"GET /pic/20220322/07d308773c40d2531b4d4ebf93f39523/1.jpg HTTP/1.1\r\nHost: pic19.ysj77.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18447\r\nserver: cloudflare\r\nlast-modified: Mon, 21 Mar 2022 19:53:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"6238d79d-480f\"\r\nexpires: Thu, 27 Nov 2025 10:54:15 GMT\r\nage: 26173\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlUZSDuKYRMdPaDxk9Dn9Sb7yr8%2FZ%2FuEqwbEto8xe7z8pVpsDSEsmrdHxY6zVjjjsrcmnUngBBoet%2BQnBOIv%2FMl4qaUVOep7%2BaJ7FSvjzg%3D%3D\"}]}\r\ncf-ray: 9a1ca50ebedd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18447,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 624x352, components 3","md5":"6316270544b942b2c3c0f53a1abac69f","sha1":"6080051448c11a9887724d0fb89ec0f801fae14c","sha256":"dc98ff000ca0c0a2ff7b8bc1b8ba0cdf9676abf94a9ba27a43bbb7b1cfff1eec","sha512":"fb10347bb5101555beb7da3f26d0a2414f8ff5cc40b1f66625a1c3dd85bf3620dc201ecaef10e5e27fdd61ae24c543d3779d49acb74e3c25cd1b056a129554ce","ssdeep":"384:vavT8MqkN/u7brSy1YD7a7h4HPaPtlKdCZ7xEmxS7H5POLAprja2Cy29I:vabCktu7LpKED5S7ZEApXxL","tlshash":"4682d098d4661d13f1b4527e9387262fe3643dc1bbba6b8ce43f8d55ed0089cc19c685","first_seen":"2025-10-30T09:48:03.82682Z","last_seen":"2026-02-07T11:57:17.764937Z","times_seen":5,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":50,"dns":1,"connect":8,"send":0,"wait":15,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic17.havzy1.com/pic/20220305/5923840a439039d6aafab92652bb38eb/1.jpg","fqdn":"pic17.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"172.67.181.23","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havzy1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 19:23:49 GMT","end":"Fri, 23 Jan 2026 20:22:18 GMT"},"fingerprint":{"sha1":"F2:DE:65:F9:E4:F5:BF:9E:21:50:9C:EB:08:59:C5:FA:E1:05:0C:68","sha256":"73:0F:EC:CF:71:5D:20:C0:06:D4:89:73:47:1E:80:74:08:40:39:7A:98:6F:D9:5E:60:C1:59:1C:E5:3D:07:5B"}}},"request":{"raw":"GET /pic/20220305/5923840a439039d6aafab92652bb38eb/1.jpg HTTP/1.1\r\nHost: pic17.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22031\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Mar 2022 18:05:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"622254cd-560f\"\r\nexpires: Thu, 27 Nov 2025 23:08:12 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6h76B3Djdl%2Fv15DiSVWiXAjk4NymyeIT3FQIL7lpNIh75ZqdW%2BQTtZ4zYvu5MLSK47sTDVfTLLBkIqx19iIqNdEd%2FQvpfixbFRKGUHWiDrU%3D\"}]}\r\ncf-ray: 9a1ca50eb8b9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22031,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 28465x28598, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x406, components 3","md5":"aa4c07815530f1cc18364395b0dc0952","sha1":"3198c5e5228de18e8d48b92d7c8f995cd0045536","sha256":"02e1d70ce75abdc151584889923b2342695840c85647d215783f3844d2bfce95","sha512":"2307242c839ad82baf81a5f541a01120415d1f82d811183c7e20b4d8d57cfd963cdee9508382b6f3aa34245177c4093eec35d739c6daad215e31d941a30180be","ssdeep":"384:CERmSKxFIXvPRWCp3RvUjhixuWCZBw7URbM2u3h7bCyRXagGWciRakZ/TV:0SIU3vUMxgU7qbMDR7bHXagGN16/TV","tlshash":"8aa2cf03b06cc8214a6e573cd3e556ac4573a0f4f5d1cff776642898a364aca70a3a2e","first_seen":"2025-11-21T02:09:49.926996Z","last_seen":"2025-12-22T19:47:25.211135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":54,"dns":7,"connect":5,"send":0,"wait":12,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/fonts/fontawesome-webfont.woff@v=4.7.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:25.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/fonts/fontawesome-webfont.woff@v=4.7.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-font.css?@v=1.0\r\nCookie: click_vod_time=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:25 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 98024\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\netag: \"630f1aff-17ee8\"\r\naccept-ranges: bytes\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8%2FERim8z5vrnWmOBQeydyJr2oTSL2AJcBECN7bNdZjWifs1v8iDrD1JHlyp%2FcJS9WuehN7dodG5sakQT0WKYVWRfmEpB1GzaU8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1ca5161fa8b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98024,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format, TrueType, length 98024, version 4.7","md5":"fee66e712a8a08eef5805a46892932ad","sha1":"28b782240b3e76db824e12c02754a9731a167527","sha256":"ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07","sha512":"9c776dea55a01fd854ea23b3463d9ac716077d406ecbe8ed0c9b6120ff7e60357f0521ab3e3bf9d4e17ca2c44a5d63ee58a4e7a37a3d3f26415a98d11c99e04f","ssdeep":"1536:Te9lM9ITKMpPtandzpLwETpNfdFj2yExmni83X3t4MCWzSBE2RM5RgUAkzm7zl+b:VWKQta9pBNT1n3X3BnmBI5Wx7zlvKfF","tlshash":"c2a312845ab5133bf704b97043bf87704a5a711ebeadad7158c3618d7faa39834006ee","first_seen":"2023-04-05T07:45:03Z","last_seen":"2026-04-16T21:16:24.982785Z","times_seen":28174,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/854881.html","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-21T02:09:23.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /854881.html HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RGgbu3KZaITwZs0Ub0jd8DnIbnwsjGwb7XmJeZPLhH5Vp7r8%2F%2BbZ532EmpfwPgUiiE0vryrCPXOeKDxs62wmh4Fy%2Bg%2FeFqrsSqMt6Q%3D%3D\"}]}\r\nage: 9\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a1ca509083f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45207,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40491), with no line terminators","md5":"46ae23c60553be09344fa21876089926","sha1":"1b3fa2d0bda25b76f092e5210ac7ab52f27a9ea9","sha256":"68aa2fe522343931065f23a0921b5085d8527d541b59b029889f448a8f31b3f5","sha512":"eb11cc85e29499aa097c4f6cb0c5f84a0e781491fd5ba9ce44c18ab29763083b3638ea61c9a5281e6eb750108e4ad65e57b822dae5355bfc4fe9eab8cc4b1008","ssdeep":"768:aApQDQsIhW+xB1HCS50gBbIS9hQvHgBbIS9hQvrV6YCwZBE41h:zghIlBNOgBL9hQvHgBL9hQvrV6YCwZBB","tlshash":"0a13c7726199753bb21716d894b0ff99f0670a0ecaa38d16bbf4af77e304d99c41108b","first_seen":"2025-11-21T02:09:49.930274Z","last_seen":"2025-11-21T02:09:49.930274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":25,"dns":0,"connect":1,"send":0,"wait":525,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-font.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-font.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 20:51:11 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXoHKLWgYD5PKkNrj9XINHTjhS1Tu47wFE7LoIzdzrgAtyfFO4Ft4YbZnl5esxtsORJGUjqdiP%2FjP9INPW5yK0AtfHIUAx51DsU%3D\"}]}\r\netag: W/\"630f1aff-8d8d\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50d9d59b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36237,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (480)","md5":"6922d8478cbb67cac67116ca07ca8160","sha1":"4e5758cdad42c037e1aaa2ec9ec09a943a1da0e2","sha256":"122edccd259e6eaf66b42faf33e96a46eca3fb76d235ea2f2319f5c1adc3df3f","sha512":"39211d1b25e7fa40110125b83364ed680e65b504850baad2488b1adbde84f995577443a015cbf0666029ba613c0dc59c80f6a1d2f29dff6f815cb49c403fec92","ssdeep":"384:z1NpcTKmke+g3b/ce8i+CXdYqTmiWWD3eO1EPFvaQfgJoQv6c3NLr:z1bmkT20e8i+6CqTZDT1ovPfgJoQycF","tlshash":"46f221ece90e28d34399e4c56f806b80673abbbddd414ca9d0063d2cd3d16b912c5be9","first_seen":"2024-08-29T17:24:56.775602Z","last_seen":"2026-04-08T23:50:34.212454Z","times_seen":124,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-color2.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-color2.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 19 Nov 2025 14:47:47 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGQ8Exkm4W3V5%2FhMSSLkO3jUstEH3X6ynHv%2FhqubWqNreefYWBeZ12YvndxIDsn84A%2BCtGpgbzCg%2FUVLzuffgUDk34HEuc0IFW4%3D\"}]}\r\netag: W/\"630f1aff-14cb\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd76b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5323,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7e44653ec1890b0eed90623615207334","sha1":"27bdf87aca3f286199811ed926ddfcf2e3a498ef","sha256":"14607abdb66018021937245b071c56104ed098f1d46cd8a719c556a6ce3555b8","sha512":"4af26d46c9522cf17e942d8a98c7cd9d416a25c2c9b4f2f6b47f9af7d24e8dc28529fc82a04b27b96e2795621bb16a539ef4b9dcf32f6049b778d03962dae727","ssdeep":"96:OcpI0bE3rig3Kwu2XBpYaJBiDY1kx1LIpeC1TjOuCu4h1:OcpIR3rig3K12RpZJADkkx1LIeC1TCuS","tlshash":"8eb1f221d243201f305beb9d65a2d682cbbf68c0d8012f7d787a30e4574d4eba97d6e6","first_seen":"2025-08-19T02:52:00.670463Z","last_seen":"2026-04-08T23:50:34.30434Z","times_seen":120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic13.seaige.com/pic/20220117/de7104967fe6ad0b19a00286a2f63c64/1.jpg","fqdn":"pic13.seaige.com","domain":"seaige.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seaige.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 07:03:03 GMT","end":"Fri, 13 Feb 2026 08:01:35 GMT"},"fingerprint":{"sha1":"29:F5:A0:93:0F:7E:92:3C:35:83:61:FD:0A:53:2A:82:A3:70:D5:58","sha256":"59:01:6C:43:E7:F6:CA:0F:A0:77:5C:FA:C6:60:45:D1:A0:D4:48:B6:BA:A8:1B:43:85:DF:AA:31:A7:D6:C4:72"}}},"request":{"raw":"GET /pic/20220117/de7104967fe6ad0b19a00286a2f63c64/1.jpg HTTP/1.1\r\nHost: pic13.seaige.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52203\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Jan 2022 12:20:01 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"61e55ef1-cbeb\"\r\nexpires: Tue, 02 Dec 2025 23:59:43 GMT\r\nage: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYHhg8llj2%2FEw%2BNy8eP9gJPJ0OiXGIATUokd9ZqwVn5O%2F0nTd9YwC6ahSNEjjbvIPScbdAYIO%2FCZm%2B%2B%2BjU68h%2F0WGUyMTUEEe0huKSRC\"}]}\r\ncf-ray: 9a1ca50edbe356ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52203,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density -805x-858, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x482, components 3","md5":"bd4775a730329fab4ff7654ee2f97eca","sha1":"9ae7354ceb355fc19601c22852fa3d0720bf2fb0","sha256":"b342e801dfe0bfffc3671076b4e7f6df301af8ae8d56ef8e16e765a8db095d17","sha512":"44857961bba917caa7f4ed5e9e923df44fd127027d1ad50ef64fedcd2fcdf8ee825b8fb806ea9f094bb9df8747508dbbfb14d21da7fc1d2292df6a0c67e85d59","ssdeep":"1536:4DciyvaoJOGcpQHXNir88rD565y/F7ZlBOS:4IiCpOGcmHXNir8w/FnES","tlshash":"8233021abdadff91de3da1b1c931b684864976fb64142f0d68c87c1a3d7e724cc16910","first_seen":"2025-11-19T09:02:59.004103Z","last_seen":"2025-11-21T02:09:49.934485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":9,"connect":3,"send":0,"wait":9,"receive":3,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic16.havzy1.com/pic/20220308/b6bcb8c7af11c0361a994fb202e037e7/1.jpg","fqdn":"pic16.havzy1.com","domain":"havzy1.com","tld":"com"},"ip":{"addr":"104.21.64.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"havzy1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Oct 2025 19:23:49 GMT","end":"Fri, 23 Jan 2026 20:22:18 GMT"},"fingerprint":{"sha1":"F2:DE:65:F9:E4:F5:BF:9E:21:50:9C:EB:08:59:C5:FA:E1:05:0C:68","sha256":"73:0F:EC:CF:71:5D:20:C0:06:D4:89:73:47:1E:80:74:08:40:39:7A:98:6F:D9:5E:60:C1:59:1C:E5:3D:07:5B"}}},"request":{"raw":"GET /pic/20220308/b6bcb8c7af11c0361a994fb202e037e7/1.jpg HTTP/1.1\r\nHost: pic16.havzy1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12791\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Mar 2022 05:49:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: \"6226ee4e-31f7\"\r\nexpires: Sun, 07 Dec 2025 11:18:33 GMT\r\nage: 54859\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2VbmFDO7crFG%2BU3hg1Sb8VZ1p24WVf1bH4tFKmR5zOLIaCnImOMWreco7IDDH5rvmQqGdjhD9VeCOnOegTRWdwU0xH%2BGiN67MgxnxtzGqE%3D\"}]}\r\ncf-ray: 9a1ca50ebaf0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1079x1080, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 720x416, components 3","md5":"ebe642624332faeee6e41452641adc7b","sha1":"d56f8edd2c5adb1769f4e7dbb619fb38853a9f3a","sha256":"7c9155bf83b9eca8592f97103760f884440ed9b618b7134b29a64f77c4817183","sha512":"73775b88ae15a61bc45235a62c89fc35fbed932eaa1fbb8c480f31b2c4f992dc866162b0fe0d928e6e3cc978efcdf77e91cddb4136ce5b1b713fa246079f8eda","ssdeep":"192:D5P9/0jAf5bIDiJou6Rpz0OIZbMpoxpHG/oie/KjNOn0SDrpL9KsFTcsA1rQJ1D2:n/aAKi+bLcKoUOnXTKeT1SrORWz","tlshash":"1c42c083436e7ba6e9a43136a15507250728ff3383680b31c72b457e94ebcd95938a5b","first_seen":"2025-10-12T04:32:00.264746Z","last_seen":"2026-02-02T06:18:02.588732Z","times_seen":5,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":9,"connect":3,"send":0,"wait":13,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/static/css/a_pc_wap.css","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/static/css/a_pc_wap.css HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.bht2.mom/854881.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 24 Oct 2022 09:16:10 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 17 Nov 2025 19:07:01 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9o46BZnWwyHsOf7k1tAkrTomIsH%2BxvlDU11arYdwGY4xkU%2FP8eUPBteKBYsTdI3WLlDPZJv2hlSYPc4m%2B9RxS7X2ipADF%2B7Qgkg%3D\"}]}\r\netag: W/\"635657da-b3c\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50e0d7eb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74a8b81d486fd0fab0c1e1a21faf815c","sha1":"3671d10e96160cba777510eafe225a6fab98dbdf","sha256":"db0fd01915d66b5e8e03851256f02c85422be168cf9b2b68ab776878447f9e1c","sha512":"9399229eae7fd56b29d69e0cacc7b2a439aa45fb392df8549e04ed3fd81ee280694bf2a96acebdfc759862fb7a863fcba5e4adc4228c40bb25ac75fbca504226","ssdeep":"","tlshash":"2e515a162b6f2488a80ba1b85fb567686a294053bb0fcc2975547324ff4e78d09b2789","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-04-16T19:31:21.183602Z","times_seen":9460,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vxq.bht8.bond/854881.html","fqdn":"vxq.bht8.bond","domain":"bht8.bond","tld":"bond"},"ip":{"addr":"172.67.174.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-21T02:09:22.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht8.bond","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 08:45:50 GMT","end":"Sat, 31 Jan 2026 09:40:59 GMT"},"fingerprint":{"sha1":"A5:09:6B:E1:11:64:C6:6B:E5:33:36:B8:ED:10:05:C7:1D:B2:CB:8A","sha256":"DA:9A:09:E7:CA:58:6C:75:6F:8F:6D:7C:01:2A:FF:63:F6:1C:41:E9:A8:64:71:20:B8:3B:49:F1:21:EC:6C:FA"}}},"request":{"raw":"GET /854881.html HTTP/1.1\r\nHost: vxq.bht8.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 21 Nov 2025 02:09:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.bht2.mom/854881.html\r\nserver: cloudflare\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BG4vWDZdsOci6xfRtzaC12orgsF400J0bSZ%2Fsx1K7Kt2155mkzLEO%2FjNeti86A50tk5pAiZpV%2FAnkdeS8heBXjAB9WolkdofvY%2BG\"}]}\r\ncf-ray: 9a1ca506ce74b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45207,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":327,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-ui.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-ui.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Nov 2025 12:36:20 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5inURb8tVOoniImLT16WCulLka39EmhM8JazSkphqess7n7dcGoX1zqBctX53FqWecivq9be%2BCgpfJB57s%2BSUhKnAsISbGa%2Frg%3D\"}]}\r\netag: W/\"630f1aff-8786\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50ded6cb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34694,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (1893), with CRLF line terminators","md5":"2c37880625064ea33b7905c00ff4ad15","sha1":"816cbcdcb1add3ccd505b1443b3e1f6b67e64d25","sha256":"1173372fc96953b0ea318da0196c4def716050dee459d277890f2c70c9d91987","sha512":"648bc9aa882dbadb1416b8ae48b712b69f2f63ed5aa52c3904ec60aceb87b24ece7c78fb566c3434f7f33b2a28abc48a62ed7976f58620ea5ae61b633b88713e","ssdeep":"384:Wcwr5rIXxlqC+bGpYpUulnwGeXpkY/dol1nG04zE3AnSEUvOitG48VZ6:WjRmxlaGpYeu5wGeXppF6PuNf748K","tlshash":"95f26751a6213908902f5b5277a39b5fed2b5412b33214febdb03c59c78f9a702f16ca","first_seen":"2025-08-19T02:52:00.638863Z","last_seen":"2026-04-08T23:50:34.22531Z","times_seen":122,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-site.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-site.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Nov 2025 12:36:20 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqeuctPHsF3avYqf3eOcgODhVp3p5%2BAaG%2F3w0WNE%2FkOI%2FdwxYYpv%2FcpHaWy4Zcc8e6oMOHhreKPGIk3N%2Bwp1u2PcAaA2IJyOqZA%3D\"}]}\r\netag: W/\"630f1aff-28b1\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd70b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10417,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"639eee4bf9e2b754feb73fc980462da5","sha1":"71d4b1102de0d155ae26d4c997b6fe0549eff4bc","sha256":"0b20434b2510970860f1318ac376a783489ed025e1628c3f9acc7bbd582e4f49","sha512":"35a4782ea1414907d071359c417c5fc973949c53b6bc18530a066740e903138a3e033e5cb79f5dbb3dfb5b8c3aecb9b6e3ae4a623790dda495400e4c4805f53c","ssdeep":"192:OcUToFqeuBhBY1u/rpnfZCslYxKlpdoaFnfly2S+1YMsddpJEs7Utn/RXiGZrQmW:OcULtDxfZzO","tlshash":"c422bf1547133108b07babd3f9a36f5a6a16ac02e60181fdbd60682ec5ce9538bf175f","first_seen":"2025-08-19T02:52:00.671563Z","last_seen":"2026-04-08T23:50:34.241911Z","times_seen":123,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-color.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-color.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21Vp2f5OnpgXG1sR53VaTeNkOLxan%2B3UQNVSN%2FR0rx9h5R%2FPfaEkdSwaeUeNL2A%2FgLd6pxRCwRXRCtJR1TWQny4af4ixAPqdqLI%3D\"}]}\r\netag: W/\"630f1aff-149f\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd72b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5279,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4d2f61e11036a5123a57a1188b3d527d","sha1":"ef4f9fa46170beb58e409384dcfb184ce0a5d9fd","sha256":"3790504347337048b13348086c1da2f7304ec4ee255d840102aba99e57d7c024","sha512":"ddabd4cba7894cfbca8e6f35aaac5a3a2cfee40a8fd04751aa1899b390d55334040876910678d23894aaaf7bb056ac41ab77b16acfee1b4d731dbb85b8719d34","ssdeep":"96:OcaDbE3rig3Kwu2XB10+JBi3Yxkx1LIGeC1TjOuCu4hb:OcaM3rig3K12R13JA3wkx1LBeC1TCuCB","tlshash":"63b11321d203101f305beb9d64a2d686dfaf68c0d8012f7d787a30e0534d4eba97d6e6","first_seen":"2025-08-19T02:52:00.678248Z","last_seen":"2026-04-08T23:50:34.225916Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-color1.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-color1.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 19 Nov 2025 14:47:47 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNi7laoJB8nH9MNeHgseizI5xStdggO9mVuYgoAWkUYSv0QVI84gk4U6Uci326TdLyrUBNrilKAU7fyrJfCjKskC0oyOX0Whqdo%3D\"}]}\r\netag: W/\"630f1aff-14d9\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd74b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5337,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1351774994ea8dbd6255303b195de41b","sha1":"41ec1f991736eabc615bb0ab2dbbf2692bc813f7","sha256":"1181da42c17405d3fd86e461ae3ddb4640a59977e0771e7123fa8e95dee92421","sha512":"7a73f3a65d6c81fb42188728ab0f846bfd5ab94643a59b2b41dc47e671293635a31a01fe972db4b5c22324890c57f79a268120d6644a70c68cdea4d4f0a08749","ssdeep":"96:Ocjn0bE3rig3Kwu2XBpYaJBibY1kM1LIpeC1TjOuCu4h1:OcDR3rig3K12RpZJAbkkM1LIeC1TCuCz","tlshash":"bcb10221d203201f305beb9d65a2da82cbbf68c0c8012f7d787a30d0534d4eba97d6e6","first_seen":"2025-08-19T02:52:00.700058Z","last_seen":"2026-04-08T23:50:34.294261Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/css/mytheme-color3.css?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/css/mytheme-color3.css?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 19 Nov 2025 12:42:31 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqWVWAKEGx%2BK5VDFU%2FBCamkmJj2Gnpl3FctqTbcE8CJe12VWdEoYxYch8y3l23NXjJJF019Shp4M4Kv7NYoJl1J5ZHxHPaRn4sY%3D\"}]}\r\netag: W/\"630f1aff-14c6\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd77b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5318,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dccea559e878dd53d160aded6d283a9d","sha1":"10a2353630d0e4176b5c2b685ef2667c91babcbd","sha256":"738098afcb7258685fa3f7636e88e2a0c2dad02b8738c1a15ca8759101e4463f","sha512":"fbee2e139d417b74318eb9a6651ced882b37df7d6b110031a45c25c3f5e19ec37f87fe2cb6f6f3ec802621a2e822b5d32b39ec77b51b34ea768ba6ac6f421a22","ssdeep":"96:OcSDbE3rig3Kwu2XB10+JBiNsYxkx1LIGeC1TjOuCu4hb:OcSM3rig3K12R13JANswkx1LBeC1TCuM","tlshash":"b6b1f221d203101f305bdb5d65a2d986dbaf68c0d8012b7d787a30e4534d4ebe97d6e6","first_seen":"2025-08-19T02:52:00.672546Z","last_seen":"2026-04-08T23:50:34.230674Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bht2.mom/cn/home/web/template/088vip29_wtpl/js/mytheme-site.js?@v=1.0","fqdn":"www.bht2.mom","domain":"bht2.mom","tld":"mom"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bht2.mom/854881.html","date":"2025-11-21T02:09:24.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bht2.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:43:08 GMT","end":"Tue, 03 Feb 2026 07:40:32 GMT"},"fingerprint":{"sha1":"D8:D3:12:37:E6:9D:0B:85:ED:66:42:B3:A4:F1:2E:CB:E6:75:3B:E9","sha256":"C5:4B:85:EC:83:FE:34:51:B1:93:AE:22:D7:3F:10:3E:65:4B:0A:9B:EC:B3:6D:5D:3D:DD:0E:55:CD:AA:51:8B"}}},"request":{"raw":"GET /cn/home/web/template/088vip29_wtpl/js/mytheme-site.js?@v=1.0 HTTP/1.1\r\nHost: www.bht2.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.bht2.mom/854881.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 21 Nov 2025 02:09:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Aug 2022 08:25:35 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 20 Nov 2025 21:40:50 GMT\r\ncache-control: max-age=43200\r\nage: 5583\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKv5klwvDdSkL%2BXWjifFcbkJBozkALffci3K9dKnk0O4CrcMWpJu8vD80QhNDBbvM6kzwO6P1Aq3hCqsTmmtEDYvWemjtrhb4yo%3D\"}]}\r\netag: W/\"630f1aff-1f886\"\r\ncontent-encoding: br\r\ncf-ray: 9a1ca50dfd7bb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8738)","md5":"4665a55e342cb0dceeb7dec86a8ffee5","sha1":"81dd01cb52acacf9f39c143b11cfd79130f473fe","sha256":"27d2ed418a3b205f73c798d94d71922523a2a3eff5c944fb6674f82a57dab88c","sha512":"56817132e0e5bfd18c725a8e6e0d28380c10c1066ca6e9cdcfb77e8a08e4391797cd9bd363ea692fab77b4dfb3e5849de7136e54130604a60e0251ce773a51b3","ssdeep":"3072:qzN9j027ioFThP2V/93iYbtIVaZTegpNEJMgd:0XjRi5pIVwTegpNEJ3","tlshash":"bfc3e949b2513532429fb1e6512f420fb276646e680580bcb9b8dce66dbcc8d707bf78","first_seen":"2025-08-19T02:52:00.684211Z","last_seen":"2026-04-08T23:50:34.249355Z","times_seen":124,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
