{"report_id":"1abcb406-01ee-404d-b2f9-3de2f99b5d14","version":6,"status":"done","tags":[],"date":"2026-03-04T12:54:15Z","url":{"schema":"https","addr":"qh7338.com","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.200.238","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"title":"验证","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"qh7338.com","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.200.238","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T12:54:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"qh7338.com","ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-01-15","domain_rank":0,"first_seen":"2026-03-04T12:54:17.136185Z","last_seen":"2026-03-04T12:54:17.136185Z","alert_count":0,"request_count":17,"received_data":3015159,"sent_data":8440,"comment":"","tags":null,"fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":2,"received_data":566411,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-03-01T23:57:42.623846Z","alert_count":0,"request_count":1,"received_data":700840,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/jquery-3.6.0.min.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","size":107748,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-04-09T13:21:34.978579Z","times_seen":1099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.2/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbc65ff85e08b21d7e0c0394fbf3a371","sha1":"0ebabcd2c6da47bde11fadf331a02c98845b0a8d","sha256":"c4b0fb9e123ad9f72c1192b6feff0bb0171be251bb76050b92e5e85c1fe3f757","sha512":"ca70d36e3179ad41ec5818f3ee7b258ebad25aa2d33c968e47349ee5a1821713a28116519b0334e72fa4b82b716a8092cd5181d4acb75de459b0385b48b7735d","ssdeep":"12288:mFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlY:wlyHCcmM0/W/EEwKbhhDdRlY","tlshash":"20b4a6c9f39c265a857a32595c2e42cdb23c8075e60058bfbc5d59dc29a883c43bbf79","size":529159,"data":"","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-04-09T15:11:32.785464Z","times_seen":2858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/api.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2cb45273037dbdd95e09eb43ebbe91d","sha1":"2cae60aa072f0babeef78b85ee03a2854c8fef7f","sha256":"44c37a1c09792bd8653567437d6dc5a44e20e915307da0a861973fb3721ebdf7","sha512":"d13741289faa47cd9a2d58c8b108223ce2e6d47b26b9812d9cd76893cd870d63180841c9dd7000df2b93d5095fa20f1d664dc6008de50b66636a6b6e487b13b5","ssdeep":"","tlshash":"5e11ef25b1bb8f374f9ac4d0be191405f545c4072e4add0872dc34512fca67de29235c","size":881,"data":"","first_seen":"2023-10-13T04:19:26Z","last_seen":"2026-04-08T11:17:41.566812Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"4264b690fd201c464cb4cb9adf0ae77f","sha1":"a66c11b54155cb954ec327132c5c19bc806accb5","sha256":"a16402cf334ecb265466c745eb26ebf95d9106cda3722130d5d5a04a05e0845e","sha512":"282b514917f3b5f946c86e61f334590182a67061bab0e980466d3a21b58cba12a6c7999b52c2002488be1fd034b9131f93601f3c25213f019d083c303aff1114","ssdeep":"","tlshash":"36300000000c00000000000000000000000c0000000000000000000000000000000000","size":5,"data":"","first_seen":"2023-03-10T22:23:56Z","last_seen":"2026-04-08T13:25:53.694441Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a960d3396ca319b81490617a9a8fb056","sha1":"bbc5036b3b45ee3666bfad960e8bd2091141f561","sha256":"370a108fac9c18900e7da48dfabfd12f82892ae3ad49cb12f245ab268103be45","sha512":"f4c008ada9b6734ab3ba422f4e7d5893c28673c81e323941fddc15ee155fd10e37cc86e6794020252266c69b5ac31ab8e973b2a76040da8056bd031bf7efb921","ssdeep":"","tlshash":"4d613195e77d16bd0ae2101e5d3e21e9c53f80b6f84985bafe9c5e0432c6d0f838691a","size":3312,"data":"","first_seen":"2026-01-04T11:26:21.193799Z","last_seen":"2026-04-08T11:17:41.575816Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.0.10/js/all.js","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d179b64ca38524da0d5cd0ea1e9051df","sha1":"fee145dabca02c109d7aecd0e279c5b373f2f0ac","sha256":"9b9030ab4c0619108eec0b4df769a185d1adf93242ef4853a2eeffb79335d566","sha512":"845a2efc78d77958baba610b6a82a590566abbe286ab6d9af05365bdb71ef17304e7cc77399f9f671a6c2bb7d779906544bdb3ee27312e80d9903c95731deddd","ssdeep":"6144:N6omS9C8UjUJDVXy1oc/c7/xp6SnJUiZjDXhXNkjA:v9C8Di/cVp6myA","tlshash":"19e4c6a8d764a3fc9ec587f9c6212474b84e51be21e09328d2acc5f072974dce69dcc9","size":700147,"data":"","first_seen":"2023-03-07T16:18:52Z","last_seen":"2026-04-09T16:07:33.588396Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/captcha.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4eabd632d60e1e90f76bd922f311e7f","sha1":"041f375ed30999dc7ec7cfffd80d6b40137fb24f","sha256":"c63bacee9604c954648ae7b09fc539805a96a32263587656a311a72fb834e4b8","sha512":"fac9efbb6c32879633ab900532286bdcb35e14d43eea1028753272f147f3ecf7c69fc2dcb43a820037ffa1e76f81fdec63225a345d6153a837e79d0b0b67bc42","ssdeep":"192:HRP0FzfIo/rLI2VRh1LVyLXAXs4s2Haog8uXr/3xiCsoET1hDoZQEraGQTVq+aoh:HRP0F9VRhh84sJhu2Q1Qv/kO0eQMy","tlshash":"96320e38b37a0a7a8d6224734f996184a301d0afb742ee4c7c4d11dd5f906b877e2fa5","size":11792,"data":"","first_seen":"2023-10-13T05:57:53Z","last_seen":"2026-04-08T11:17:41.573236Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/gb.validation.min.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","size":32679,"data":"","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-09T13:38:43.54302Z","times_seen":11298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/layer.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c904b3964bd2fc97d366b6b424efa19","sha1":"71e08ce0b4fb46ab8020655aa05066b3e4e9c26e","sha256":"b3e87c584a65ae410563f196eddce4ecc62b1a654fce2ff88efa1ff23bfca13f","sha512":"df03961c95c45cc461d73ec7d9f01acfea565cfd148a6e97abd22515cb2ee6bb3dc4917fcf70fd051772679ceae06cad017769f246eed86bc227b966d7eb10c7","ssdeep":"768:Sujwajqor9cyq/GhyZqT0dq3e29nuLLx2C/u5ehmd:tj2s9c/C4E3BnuLL4cu5eUd","tlshash":"96b2a71622e0397a9157e0a2dc4fed1972f15e249382441cd35d90bd8c78cb85bbbabf","size":25717,"data":"","first_seen":"2023-10-13T05:57:53Z","last_seen":"2026-04-08T11:17:41.564192Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4264b690fd201c464cb4cb9adf0ae77f","sha1":"a66c11b54155cb954ec327132c5c19bc806accb5","sha256":"a16402cf334ecb265466c745eb26ebf95d9106cda3722130d5d5a04a05e0845e","sha512":"282b514917f3b5f946c86e61f334590182a67061bab0e980466d3a21b58cba12a6c7999b52c2002488be1fd034b9131f93601f3c25213f019d083c303aff1114","ssdeep":"","tlshash":"36300000000c00000000000000000000000c0000000000000000000000000000000000","size":5,"data":"","first_seen":"2023-03-10T22:23:56Z","last_seen":"2026-04-08T13:25:53.694441Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/gb.validation.min.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/gb.validation.min.js HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-7fd7\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-1772628834dbb3\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (801)","md5":"a55780dc13cbf1a8d375f14ebb659cf2","sha1":"9548cc269bcde0dc48e166fa6bab37af8a649e57","sha256":"35d147a863ab8828e073ca1ae89d476a9cede797c410ac555597c1f442452cc8","sha512":"3514366118d038da9131739e4557dc5fd92b8b7d3a27af00a7c2d8f4cfd49f4932991cba899fcc8171ac59eb356b25e717494225912f37d65600305ce2d3ace9","ssdeep":"768:WqBveMjZ1oE/eL8hhMjm9a1hI4vhej4pZ:Xpo5GhMjm9a1hI4vheUpZ","tlshash":"cee231166b7701e2916b71e10e4f9a083174952b5a87ce08bdac92e09f18d787373ff8","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-09T13:38:43.54302Z","times_seen":11298,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/mobile-api/v5/captcha/initWithoutSwitch.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:54.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"POST /mobile-api/v5/captcha/initWithoutSwitch.html HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 79\r\nOrigin: https://qh7338.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":79,"data":"locale=zh_CN\u0026terminal=pc\u0026is_native=false\u0026version=v3055\u0026resolution=2x\u0026type=login"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-allow-origin: https://qh7338.com:8989\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: gzip\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\nout-line: gb-cdn-805\r\nset-cookie: route=4bf55577ceef236451cccfe77519a18d; Path=/\r\nsub-sys: mobile\r\nuuid: 00117-01-00000000-1772628834af6d\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40137,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"bdf7524f6f6eda86e1de8cc13563d45e","sha1":"d2442f4f3b7d903072970c8a5d3b879a34e2aaff","sha256":"7a13baf73330332f30746305ba7846fe649e201d1b7400fe96e2cad321993c19","sha512":"3547ea32d0dcf694bca9ca5feac6df03266644334b4b56acb93986e167e03037f741798c180385838dabd42614f522374d023664d7c6a5df2f76ae65ff7f4bb4","ssdeep":"768:enwQB3x8RJpEU7IDDJSg5IS0NhUdtdY9ea6tad4MBxb3jG78dol37AU/:e7BCvhmSg58NhutdY9L6tI4s3jG78Kl5","tlshash":"3103025056482c332fbb94f138abb47f428fc950e3485102f9defa91fa66c4cd4548e6","first_seen":"2026-03-04T12:54:20.646574Z","last_seen":"2026-03-04T12:54:20.646574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/favicon.ico","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:55.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nCookie: route=4bf55577ceef236451cccfe77519a18d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:55 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 150\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-04-09T16:08:56.035225Z","times_seen":33321,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T12:53:52.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncache-control: private, no-store, no-cache, must-revalidate, proxy-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 04 Mar 2026 12:53:53 GMT\r\nlocation: /verify-page/index.html\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T16:28:35.979051Z","times_seen":13545948,"resource_available":true,"data":null}},"time_used":1032,"timings":{"blocked":413,"dns":1,"connect":202,"send":0,"wait":205,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.2/themes/base/jquery-ui.css","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.13.2/themes/base/jquery-ui.css HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-8d03\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\nage: 1528646\r\nx-served-by: cache-lga21933-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 88, 29706\r\nx-timer: S1772628834.018449,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 8356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36099,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363)","md5":"d933811bd3d6e357ad39601d152ce3ff","sha1":"e097a676f5d9eb96cecc7fbb2b73a9fc8db4b018","sha256":"c8c2157918c9fed0bb9dcc56c96b52dc7af70b05ca0228e467eaf91777751ad7","sha512":"9429346842fa0af00642f699e3b868ab5bff84db2e9c4f300f8c669817a59098e0e750dab96eae55d69610997080013a3f1718eff49386cd53e3e20cc30a4def","ssdeep":"192:W0OW02ANbMD6l2n+brGtUQnSMfps3+eYQY+h572hk/xrAY5Y6BjSmMErEURHllPx:kMD/+vaW1eyH/PiF5fydQt/DS25gb","tlshash":"88f20c316b432919ba1bd1a465a11bf7e32e1342ee2b6e7f609a345cc3d54e0c0bf5b4","first_seen":"2023-04-06T23:48:09Z","last_seen":"2026-04-09T16:20:49.82107Z","times_seen":13807,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":69,"dns":0,"connect":29,"send":0,"wait":83,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.2/jquery-ui.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.13.2/jquery-ui.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-81307\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\nage: 1718472\r\nx-served-by: cache-lga21926-LGA, cache-hel1410025-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 103, 26983\r\nx-timer: S1772628834.017850,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 126267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":529159,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1004)","md5":"cbc65ff85e08b21d7e0c0394fbf3a371","sha1":"0ebabcd2c6da47bde11fadf331a02c98845b0a8d","sha256":"c4b0fb9e123ad9f72c1192b6feff0bb0171be251bb76050b92e5e85c1fe3f757","sha512":"ca70d36e3179ad41ec5818f3ee7b258ebad25aa2d33c968e47349ee5a1821713a28116519b0334e72fa4b82b716a8092cd5181d4acb75de459b0385b48b7735d","ssdeep":"12288:mFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlY:wlyHCcmM0/W/EEwKbhhDdRlY","tlshash":"20b4a6c9f39c265a857a32595c2e42cdb23c8075e60058bfbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T14:44:55Z","last_seen":"2026-04-09T15:11:32.785464Z","times_seen":2858,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":65,"dns":1,"connect":26,"send":0,"wait":27,"receive":57,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/gb.validation.min.css","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/gb.validation.min.css HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-2d42\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-177262883452b4\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 3788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11586,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2295)","md5":"78d33e3c355aebd3c19f236f8d65a6c0","sha1":"04f69f33ddc66d4625daa4b846a1121eaeadd4fb","sha256":"ea9b48f38666806261050eacc96c6a7ed7fe36e5adad2be8f34afec7aeb1fbbd","sha512":"f08c662f8b5374accc2b9c79a78b5f3162237faf6c1e59d63dd78717a128ad1b588d2673a6ea87e2f13c46deb65678a3a6eb7ee24460dfcd8f8756c57fab3935","ssdeep":"192:zyzNcfuLLpjyFp291taF4lcrCQ4uKvVhkxP4OKyptj6ZqQ:znmdyF24F6crCQ4uxP4Dx","tlshash":"d632a773ba220244790d9d442f56ee02ba1b40176a4f8eabff91786cdfc25c9b67174c","first_seen":"2025-05-22T20:22:26.715349Z","last_seen":"2026-04-08T11:17:41.56619Z","times_seen":134,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.0.10/js/all.js","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 03:44:58 GMT","end":"Sun, 24 May 2026 04:44:53 GMT"},"fingerprint":{"sha1":"0C:5A:E2:01:10:8C:15:2B:47:73:4B:2D:0B:04:A9:CB:C4:D5:87:DE","sha256":"8A:BA:58:86:7D:78:23:12:27:76:D9:DA:25:26:4E:8B:3B:98:BF:CB:D1:33:A9:B0:4F:4C:17:B3:6C:58:38:24"}}},"request":{"raw":"GET /releases/v5.0.10/js/all.js HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://qh7338.com:8989\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaS1k9vx9PcGasBNIw6JdJFgZ%2BM3tr8Vm3euHEVqaF9X7XcZPnCJVCibvdTZ4yFE%2FJ8kCCOZkMhQzJkFgXrWB8EQQv5Vfdh1O6VEhAFYEYuwicM%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Fri, 22 Sep 2023 01:44:05 GMT\r\netag: W/\"d179b64ca38524da0d5cd0ea1e9051df\"\r\ncontent-encoding: br\r\ncf-ray: 9d7106c4484375c3-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65355)","md5":"d179b64ca38524da0d5cd0ea1e9051df","sha1":"fee145dabca02c109d7aecd0e279c5b373f2f0ac","sha256":"9b9030ab4c0619108eec0b4df769a185d1adf93242ef4853a2eeffb79335d566","sha512":"845a2efc78d77958baba610b6a82a590566abbe286ab6d9af05365bdb71ef17304e7cc77399f9f671a6c2bb7d779906544bdb3ee27312e80d9903c95731deddd","ssdeep":"6144:N6omS9C8UjUJDVXy1oc/c7/xp6SnJUiZjDXhXNkjA:v9C8Di/cVp6myA","tlshash":"19e4c6a8d764a3fc9ec587f9c6212474b84e51be21e09328d2acc5f072974dce69dcc9","first_seen":"2023-03-07T16:18:52Z","last_seen":"2026-04-09T16:07:33.588396Z","times_seen":521,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":22,"dns":0,"connect":8,"send":0,"wait":137,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/theme/default/layer.css?v=3.1.0","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:54.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/theme/default/layer.css?v=3.1.0 HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-48e4\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-17726288347b1d\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 3111\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cf9259b7dd27aacd46161ec23d261cf","sha1":"ba0c399616a5ae9cdd8aec5b76ba4aae4822367c","sha256":"7f73a66b3a9a38576d124b6243a8984d795028e3493b8fa3f688d8dbe10cbccc","sha512":"834ae73090b76f7dad48a5efa850a0009d5104cfcab402b7c343ceb49410584c3a60a4eea800d366f380dc8364f5f00e3d38101c379fd5fa19f9492781d9ada1","ssdeep":"192:99OUf4PBsPIOpyNYpyBVpkgdpkqg60yQG0yrGlwSlyDXLIXiYHIli5aT6XeFTfb1:C4CyFP/FgkFxUE6QS","tlshash":"b7821de599a31584751b8214dbee267232f85c83e40fcc6cf7df354f4f086a592a1a4b","first_seen":"2023-04-05T18:30:47Z","last_seen":"2026-04-09T13:38:43.551517Z","times_seen":11305,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/mobile-api/origin/customerService.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:54.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /mobile-api/origin/customerService.html HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: Content-Type,Access-Token,X-Requested-With\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 3600\r\ncontent-disposition: inline;filename=f.txt\r\ncontent-encoding: br\r\ncontent-type: text/html;charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\nout-line: gb-cdn-805\r\nset-cookie: route=4bf55577ceef236451cccfe77519a18d; Path=/\r\nsub-sys: mobile\r\nuuid: 00117-01-00000000-17726288349ef7\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 155\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"2f83d17c2506118ca44463eeadb0c329","sha1":"171b0b5db941f9ad938d3608b2782ca671052237","sha256":"39d5492177f18f6d07e71e3016326e0e3337431463e9db6b030249fb96253f53","sha512":"c57e9f206a12421431e84829a880b9c8335bff08d6cf1d8785e1eb98c31bb77c80a190790b9698f70d03909e1bc70a7fca38990eddb91d989917a0952612164f","ssdeep":"","tlshash":"f7e0cdd3b2a0de766f4106b3944d315f41ed554640dc661bb40c5ed423f1cde7155e39","first_seen":"2026-03-04T12:54:20.653037Z","last_seen":"2026-03-04T19:44:32.899898Z","times_seen":12,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com/","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T12:53:52.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qh7338.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://qh7338.com:8989/\r\ncontent-length: 59\r\ndate: Wed, 04 Mar 2026 12:53:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T16:28:35.979051Z","times_seen":13545948,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":479,"dns":32,"connect":221,"send":0,"wait":219,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.html","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T12:53:53.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/index.html HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:53 GMT\r\netag: W/\"69534036-1475\"\r\nlast-modified: Tue, 30 Dec 2025 03:00:06 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-1772628833ee61\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.2","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":5237,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e0c6b0ac5550138492acaea03a9acef8","sha1":"4d6ddad2802603519709893229a95c34a2f80417","sha256":"81c38142e4cbd28daca7805bfe7b9fa0c9b035141f511e511b40f8edb5ac0676","sha512":"273030ba20d729f4b28680d2ee38eb5c42f2fc682f39ca3cfca033c5df3ba2be711f12dbc267a425a771f8b84a1370c65fd00f738f2173664dad3091076a88bf","ssdeep":"96:zu04XseUBVhL4tShkvoFavV801ovtq1RA/sGBsUg9230bVB+5:KseU7+zoFaC01EEkB130bVB+5","tlshash":"eeb19591eaad1fff0996044e5c3a60cde17f8436f904c4fafdee091122c6d0e834a815","first_seen":"2026-01-04T11:26:21.184808Z","last_seen":"2026-04-08T11:17:41.569742Z","times_seen":66,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/index.css","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/index.css HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-1c2a\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-17726288342f2c\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"563e1e89cd19ebe1109b4d323aadc1b5","sha1":"0b54d74d45d37e7dcb164b90306902f1c87a0379","sha256":"5dfe5c34512cfdca7ec57d05b1c166579edbb3eb0497bc8a2f995a300dff6b38","sha512":"8a7d3a539104814d66a688ecfbae52a3938c5f5d0ec10c22384299afbc89b4c4a971c278fa05baa47b85085999463e429539d29dc483973c5770f3f601e02bb1","ssdeep":"96:ei1Cqr6bMmUVCzNVhEFflzcRM2Z3Fc72y0nbl+uWmsAsT+E0sqsEGUx2ZJS:eiIhQfoBVKFJcRMm3FrnSfQ","tlshash":"24e1bb5109a98d13b8924f6c24f455482b68d132978ecffcbda8a068eed83d23771ed5","first_seen":"2023-10-13T04:19:26Z","last_seen":"2026-04-08T11:17:41.572138Z","times_seen":265,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/layer.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/layer.js HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-6481\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-1772628834fb65\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25729,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25632)","md5":"8c904b3964bd2fc97d366b6b424efa19","sha1":"71e08ce0b4fb46ab8020655aa05066b3e4e9c26e","sha256":"b3e87c584a65ae410563f196eddce4ecc62b1a654fce2ff88efa1ff23bfca13f","sha512":"df03961c95c45cc461d73ec7d9f01acfea565cfd148a6e97abd22515cb2ee6bb3dc4917fcf70fd051772679ceae06cad017769f246eed86bc227b966d7eb10c7","ssdeep":"768:Sujwajqor9cyq/GhyZqT0dq3e29nuLLx2C/u5ehmd:tj2s9c/C4E3BnuLL4cu5eUd","tlshash":"96b2a71622e0397a9157e0a2dc4fed1972f15e249382441cd35d90bd8c78cb85bbbabf","first_seen":"2023-10-13T05:57:53Z","last_seen":"2026-04-08T11:17:41.564192Z","times_seen":269,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/captcha.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/captcha.js HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"646c6101-2e4e\"\r\nlast-modified: Tue, 23 May 2023 06:45:21 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-177262883414e3\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"c4eabd632d60e1e90f76bd922f311e7f","sha1":"041f375ed30999dc7ec7cfffd80d6b40137fb24f","sha256":"c63bacee9604c954648ae7b09fc539805a96a32263587656a311a72fb834e4b8","sha512":"fac9efbb6c32879633ab900532286bdcb35e14d43eea1028753272f147f3ecf7c69fc2dcb43a820037ffa1e76f81fdec63225a345d6153a837e79d0b0b67bc42","ssdeep":"192:HRP0FzfIo/rLI2VRh1LVyLXAXs4s2Haog8uXr/3xiCsoET1hDoZQEraGQTVq+aoh:HRP0F9VRhh84sJhu2Q1Qv/kO0eQMy","tlshash":"96320e38b37a0a7a8d6224734f996184a301d0afb742ee4c7c4d11dd5f906b877e2fa5","first_seen":"2023-10-13T05:57:53Z","last_seen":"2026-04-08T11:17:41.573236Z","times_seen":263,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/images/captcha/code_btn_arrow@2x.png","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:55.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/images/captcha/code_btn_arrow@2x.png HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/gb.validation.min.css\r\nCookie: route=4bf55577ceef236451cccfe77519a18d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 12:53:55 GMT\r\netag: \"6465b33e-8cf\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-1772628835d72f\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2255\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2255,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"9daa5a841c2531af8bfe9536d3ba1e21","sha1":"2c26f630cd2f2be3c2dc3cacce404ae38a13f63a","sha256":"b51bd286c90fccb0e03653e114410623d7f2f209bef91636a6a5b3f5febe7116","sha512":"6cd69cac7aeee60934e08c61b64d1bf64aaf6296047774e3b1c609d82719f6cad94bd56b2e38aac8ef53aba611cc32013b950bac3544f939d76653132b64e0e8","ssdeep":"","tlshash":"bc412b605db0a489a78b83fd42126707cc735f659f8b0203259aae60b915acc84efd92","first_seen":"2023-10-13T05:57:53Z","last_seen":"2026-04-05T18:16:30.460883Z","times_seen":142,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/api.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/api.js HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: \"646c36c0-371\"\r\nlast-modified: Tue, 23 May 2023 03:45:04 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-17726288348cbd\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 381\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d2cb45273037dbdd95e09eb43ebbe91d","sha1":"2cae60aa072f0babeef78b85ee03a2854c8fef7f","sha256":"44c37a1c09792bd8653567437d6dc5a44e20e915307da0a861973fb3721ebdf7","sha512":"d13741289faa47cd9a2d58c8b108223ce2e6d47b26b9812d9cd76893cd870d63180841c9dd7000df2b93d5095fa20f1d664dc6008de50b66636a6b6e487b13b5","ssdeep":"","tlshash":"5e11ef25b1bb8f374f9ac4d0be191405f545c4072e4add0872dc34512fca67de29235c","first_seen":"2023-10-13T04:19:26Z","last_seen":"2026-04-08T11:17:41.566812Z","times_seen":270,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/theme/default/bg1.jpg","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:54.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/theme/default/bg1.jpg HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: image/jpeg\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: \"6465b33e-298b5d\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-1772628834d8ac\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2722653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2722653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 5472x2976, components 3","md5":"d3f4c4bac967ff4a768c568ca3024b45","sha1":"9f8ba786247a2184016ceab8db814a8afe357649","sha256":"f235cfd4a553b95cb59bbf373b799a4d14091bdffa9e13135b005a07cd1d8d5c","sha512":"a773d2e4194b45f614fb3d4a7bee4a4095ea74cc243782ebd95ed0a75b8ddf1de04c7f308533dac025050856ded2c92be089ea6662cc4384e288771d67b2b7e5","ssdeep":"24576:ENIgnNmkBHEM3A3Yz8Lqu06ajzL79OjdXu7WlPi:xgnQkCMQIz4679OAd","tlshash":"f32523244c6d9cb2d02233796e8ba261cda46c3a564dcbcd3315572b3baa4d3d73b346","first_seen":"2025-08-11T13:32:18.778581Z","last_seen":"2026-04-08T11:17:41.573781Z","times_seen":125,"resource_available":false,"data":null}},"time_used":7307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":7099,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/theme/default/icon.png","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:55.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/theme/default/icon.png HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/theme/default/layer.css?v=3.1.0\r\nCookie: route=4bf55577ceef236451cccfe77519a18d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 12:53:55 GMT\r\netag: \"6465b33e-2ce5\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-177262883509ae\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 11493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 61, 8-bit/color RGBA, non-interlaced","md5":"551539f873d9ebe0792b120a9867d399","sha1":"fe47ec617507e9ce5f6ce7ac9b179a3c9231882b","sha256":"99942159547fc45a02ddeb5af9570b6c870b18c36f83fd53ccb7c0644d346c89","sha512":"450df8de1ed6f13df9c332ec408eded981df74fa618e74459e9929313c84a0ca214db7fd2fc09dd4d77b78fedad8239aafe15f9fc92ea5750ff81e13d3e23dac","ssdeep":"192:g+BgQQHIfTV8JHtcAcP1wvS6rrgCpGJdqXi3PPFbcC9VMKZK:giQHILVMtQPwrXGJdqy3PPF4mVMKU","tlshash":"9132bfb85b68eef1820ff9a0c4dd059d02a0e54129e3d408fe38267c1986f88cb32972","first_seen":"2023-05-02T17:13:39Z","last_seen":"2026-04-09T05:48:20.497727Z","times_seen":2239,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qh7338.com:8989/verify-page/jquery-3.6.0.min.js","fqdn":"qh7338.com","domain":"qh7338.com","tld":"com"},"ip":{"addr":"20.255.104.129","port":8989,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qh7338.com:8989/verify-page/index.html","date":"2026-03-04T12:53:53.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qh7338.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 15:11:07 GMT","end":"Sat, 02 May 2026 15:11:06 GMT"},"fingerprint":{"sha1":"9D:7A:68:36:D0:C2:69:75:87:D5:34:69:01:8E:BD:44:26:AE:E5:9B","sha256":"77:28:71:D8:22:DE:D5:74:98:21:BF:29:36:D9:17:67:FC:FE:D1:D1:99:92:36:11:25:0B:64:9B:B9:43:AD:24"}}},"request":{"raw":"GET /verify-page/jquery-3.6.0.min.js HTTP/1.1\r\nHost: qh7338.com:8989\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qh7338.com:8989/verify-page/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 04 Mar 2026 12:53:54 GMT\r\netag: W/\"6465b33e-1a4e4\"\r\nlast-modified: Thu, 18 May 2023 05:10:22 GMT\r\nout-line: gb-cdn-805\r\nuuid: 00117-01-00000000-17726288340ce9\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":107748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-04-09T13:21:34.978579Z","times_seen":1099,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
