{"report_id":"20ab45a3-e06f-48d2-861d-b7d1ba31ea2e","version":6,"status":"done","tags":[],"date":"2026-05-22T04:51:47Z","url":{"schema":"http","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"taofangzhe.com/#","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"title":"bet365英国上市官网","dom":{"size":259787,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"fb58a6dd7f01aed1338840ca2db952af","sha1":"4fbf45f6e9b946f4b3f3e29af537475fb8df8595","sha256":"6c6c6a6c74a0bdaa531b033064bb92784df797a2b615873d1ab1f8f6658f0060","sha512":"d4065bcaa40546ac990d616f7da027be28de46f24e504422295ae84344f320fd5f0f4c7a5cdfa7d7bbfd32736eaf09535da642e886a7ede3b36f753f2b0b14c0","ssdeep":"3072:PwGkFbIf4grvTKFCHZ85uVSq5ORbHCFwXt+wkeEqdCNRtRmzQWzPUlX33X3K1+Qh:PwG+qbvOC34Wt0t+7dqOczQWziX3QSA","tlshash":"5f44bf5168f6046700a391d16db65b0b7fa4e147ce0a9a4437fc4bd88fcbe4fa8771a8","dom_hash":"domhashf96cae9523d8edb0874723f9c5ddb3f4","first_seen":"2026-05-22T04:51:59.615779Z","last_seen":"2026-05-22T04:51:59.615779Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-26T04:51:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"5getfab.qdhyxt.com","ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-15","domain_rank":0,"first_seen":"2026-02-25T14:49:40.297571Z","last_seen":"2026-05-13T23:41:17.43458Z","alert_count":0,"request_count":85,"received_data":2669709,"sent_data":40346,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-05-18T06:04:11.294427Z","alert_count":0,"request_count":2,"received_data":30885,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"taofangzhe.com","ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2011-09-14","domain_rank":0,"first_seen":"2026-05-22T04:51:52.900015Z","last_seen":"2026-05-22T04:51:52.900015Z","alert_count":45,"request_count":9,"received_data":453470,"sent_data":8886,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/countdown.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9ef714974f58eede8526db005f26b92","sha1":"6fd64709325b5b71c79429b2e5f1cc900108e5a5","sha256":"ef1fd94cfe9cd440eccc5e91db340db22ccdb298a1d4a7a0f1302a36ee8a53d4","sha512":"8af9c072b9b67f0afb4ce40ec4abdc34be452f221f3ba256be122ed34d806d6cda8b32516cd969fe6a071ace8e4e8b60d04e91c3961658a4f2f590c3f3f7246f","ssdeep":"192:7ZMj+vKn7G1N12QKdErjigRQ078bxKl9zru:iK4MN12CfigRnkKltru","tlshash":"73e163cf262215362f32529ea4af11073170ca3064045d1c97ecfa44a9f8ce765beb39","size":7363,"data":"","first_seen":"2025-03-03T20:52:38.658434Z","last_seen":"2026-07-30T15:09:05.077707Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f05d911bbbd3ecb39c8ca94fa0d98769","sha1":"3965a7d8a500bd37b64826e8df52dd57c64cebe0","sha256":"5e29fc9c0381812ac8dfca7ef77268002c2c9133d84fcf195eda639760b670fb","sha512":"3420234b6fd70d77add5ac46f466c6be1041766220f4cd3355176ef883bd8d1bc107a46da6ad85052a8e9770f67deda9aed626259798b9a2c587fe4ed78ddcb8","ssdeep":"","tlshash":"5a31c21bec1718b436a7043913fa944cb191115fe179d001758ca8414f60d86096eb88","size":1532,"data":"","first_seen":"2026-05-13T23:41:20.868422Z","last_seen":"2026-05-22T04:51:59.688665Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3942354901a881f0905acd2190173360","sha1":"dc791cb0b26036c8c754b50b6c0ac86efc478c64","sha256":"b2a648e1d0d3ccdac74d4db9875805a12dd6fe559465d502aa284a923d034dfa","sha512":"387fa575eb9096caacd2e22da9c782f0ffc3a33d818128b63d16af04dec32c1d0a46dbba222677b9f3c4ce940ab6adbf3ffd022d492f84559e440d2e8af8f648","ssdeep":"","tlshash":"dc31123ae042104406a7e0bd888a285120800c03cf482a08b3cc92958fad3cf32f3ace","size":1453,"data":"","first_seen":"2026-05-22T04:51:59.691533Z","last_seen":"2026-05-22T04:51:59.691533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","size":56142,"data":"","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-08-12T04:29:16.680828Z","times_seen":20546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bec348d1a0c0d24e87be6f6558497fe3","sha1":"78c8f08c5e14f9e7badfe77afc79745641874f96","sha256":"77a4b312139f28f0ff154600523f8c91644111590ceb815fbacf2ff9fc824a69","sha512":"a1cbb1a9a56d2562d5daeb75fa7c9ecfc3450d3f828d681e4ff897ec26c0a66eb44d43f443c1ef5a5318678d6b751c9778113d98ebb09292f02b0324ab7b3a30","ssdeep":"","tlshash":"f3218c3bc79a1386598b403a2ad68a0571a818e3ff189c107a4ed3111f8a90a217de64","size":1431,"data":"","first_seen":"2026-05-22T04:51:59.692536Z","last_seen":"2026-05-22T04:51:59.692536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/checkinput.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","size":15360,"data":"","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-08-11T08:47:34.358319Z","times_seen":5062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a9702732c5ef4fbcf872fef2935875a","sha1":"4c7cdb0487e3f1196fb44abeefccbea4a80379cf","sha256":"5e37b881357dbc9f4ea728bcf5abb6091f3daeab04d714fda699affe840db993","sha512":"cf1531be316c99daaeda900cc4933e9ee4d9af0c5c350db51d7a948e7de47365244fa844bb0eda970b606821429143962f1776a9bf3a1fec87c4a7628925690e","ssdeep":"","tlshash":"1dc01244c235441216cd2170a10069500c03726ee41025001f0e01480110c484428600","size":167,"data":"","first_seen":"2026-05-22T04:51:59.693502Z","last_seen":"2026-05-22T04:51:59.693502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f361ff9efafde898fc576724717ae2c","sha1":"7eb285dda1d4f2100c35d237e6cd0ece61f45a12","sha256":"975a5e8403bc2e53d97feb86f08b2b5963c129296b1515130738d1726e6b25b1","sha512":"8668c8ab92c17239079b9ee4720067631e437245163fc464126d49ee3759620a754a408076914ec7a5119d39a048710020ddb82d9749d9e62f94d0f748c79f1d","ssdeep":"192:aNeTmZW8XQcTtEtjKRzfQhFxhBizH4A1ltpKS8:UrWMGj0TQhLhBGplt0S8","tlshash":"e912ff05ea1a49924492937938d71d27229cc187ce41301e7fec4ab92f9f42fb8f765e","size":9282,"data":"","first_seen":"2026-05-22T04:51:59.694369Z","last_seen":"2026-05-22T04:51:59.694369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/#","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a7b1f5b03b6ce33fb4f5ac57e8819819","sha1":"9eb939e3e65c6956653589a1f346e0e2931145ea","sha256":"0a374f89201a7c6d20c30acab8e3953336c95b08d310b43e42a527731eef10a2","sha512":"c188e9727f7e15f317ecea8484ebd9c3f55954807df728f9ab4237503fb02d373510bd292e40782853e700230e85e3b7d832b5c9c30e8c6dfb1e0f387f594c21","ssdeep":"","tlshash":"e7e07dcc2bc34dc43bc73cf16245640da5a80c1939d08da4dd40280329e692319e35df","size":329,"data":"","first_seen":"2026-05-22T04:51:59.695759Z","last_seen":"2026-05-22T04:51:59.695759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84345,"data":"","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-08-11T19:47:49.280297Z","times_seen":26266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d22851b38de751d437154237ce1ce4b","sha1":"c6bc9c6a498a0a2df386bbe0ae900fbec5e1577b","sha256":"32bfc98248e72b11ccd4a67fd9e6b73b90d5c10e5525a635e4e4cdfe76183c49","sha512":"d34b80d5f15e101015f6ee61dd5bf3a40fac7e2b1f8fadd9f8dd52bf623ff1c1bfb05ddffcc109585867fdbc36162ae919af34b3e4d38cdd08b6fc8c162a92ba","ssdeep":"","tlshash":"03310c95f39c7a26c07e00b44c3f65c0d51d3871e90a0ea6fcfc529611ca362326f190","size":1742,"data":"","first_seen":"2026-05-13T23:41:20.88731Z","last_seen":"2026-05-22T04:51:59.697074Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73fd9b355fb5d3cb4a2c8bd66dd6586","sha1":"39d5eff6573cdf4cea665f529a28b155efa111eb","sha256":"2523de50b0e70f7465473bb82377947e410127f9a3688b56b45966fe015055bc","sha512":"b318ad3b6253b9c1552177770f4377f01025e6a3462c7cc0f2f32ed9e469b6a382c22bfd24c4159b61b19e0538aca72d57b0f9a3dff960aee31b616c6598e4c3","ssdeep":"","tlshash":"9c41ed8cc526001420091339b88938022a455e8bde98342e339e1e7e2feb80e4ae369e","size":1909,"data":"","first_seen":"2025-02-06T13:26:59.9621Z","last_seen":"2026-05-22T04:51:59.698411Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"47209468c8536c3ec10db8019c744625","sha1":"cfef38f7be296b5a733c8aa236c90589b042e085","sha256":"cf399cb6ba5921f9aaca92998bdf6e313e68058617c9898f394abb4336f73628","sha512":"27782bcf5a0d5083d8978e76bc8be7652d411076fd64ee1b1dd5c74ef4ba2a3c233916724714822feb56971d813bed6de1626384207c2403bddede272a9cf628","ssdeep":"","tlshash":"a141232df0f4b48750ffb071c039b4171c610db3f21d609502807700ba524d3ca28894","size":2158,"data":"","first_seen":"2026-05-22T04:51:59.699369Z","last_seen":"2026-05-22T04:51:59.699369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cad5a9c9cda69412847f0faec02584f","sha1":"6bceb784a74ee1994d231a0ba3e7bfd0b1c7f647","sha256":"5735218136876bbfce26b12581bfcab05ecd8d9de64cc0a312f33507bd6eb277","sha512":"7da8ebbdbd05f6099268027109877edb0e58f234edcdd04701c5a8db69811c524705f1969c78ef8ab529bf316cc3fbee71643a77433e5df9806033ea80abdf2d","ssdeep":"","tlshash":"6a41e59ff0f9022106f774324e7b5104392650abe447ab0036cc56406f68a2f8ae9e9a","size":2135,"data":"","first_seen":"2025-08-03T03:42:01.236774Z","last_seen":"2026-05-22T04:51:59.700343Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/assets/js/caller.js?ver=1675418257","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","size":4386,"data":"","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-08-11T08:47:34.303198Z","times_seen":5059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/js/empile.js?ver=1637918556","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a627d30c6bc0b10626ab5b2519dcc805","sha1":"4bb4096e0dd58fe05ba82f669b79d1e077f05f59","sha256":"a898bdd55d53b67bc241422495a7ea5b582be655409622c80dc992e7207e8f2d","sha512":"5264cd1c9a2e8526c666d1eafd03560e434522a35405daa6f3d05c098a10e43582cd1591453977cf33abc152be7821820b596c8e6095802da6f24b217a4c18f7","ssdeep":"768:gwl5p4zyOuB6fYoR34RXOlaKW//Qqsxlz:Ll5pXOuB6D1/","tlshash":"cdc2435d65a230a189b373f98f6e840aeb75522b4105c2643dfcc5982f74c1853eaefd","size":26674,"data":"","first_seen":"2024-12-20T12:48:50.32179Z","last_seen":"2026-07-19T11:09:23.465499Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"631c32e402843bf96dda63d4fb195273","sha1":"d4f2bd7ddca459ab4e4106602093b42e5f7cc170","sha256":"bf1e6fbb35a718a122cdfc65d64a812b413a4c2b1a99f1eaed5a66d4d1cb19c7","sha512":"1ff0586f53dfae58cb46bd05f6c8f6faa51e144b0639409a2d272495b65eb843d45f729ffb324f154ef3f48de89f3055963da2e335c8faba5142eae8222bfa99","ssdeep":"","tlshash":"49311297d16c5c5d45cb9670342518a5330ebcb3fa028ae2e23fc76832b3d49c553d6a","size":1672,"data":"","first_seen":"2026-05-13T23:41:20.885619Z","last_seen":"2026-05-22T04:51:59.701307Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"31bef2aa48d003ae05de26b53dc688ca","sha1":"0cd5f8c3f7b68fd0449cb60c52365a11e371b20d","sha256":"f1fa0fd508e836cc48a900c99f77442ed93074b8cae14008368e719e90db8b7c","sha512":"2ed26995ad42b513df412c9fe01f7f11f1828e4438194cbcf298583487563be19deaa50d8cfa8b1af712c74239d6bc24b6c5bf3235ea5e265a1696e43b37f846","ssdeep":"","tlshash":"5a21924bf7e86601707732be8abf5429173b2407ec050c40f86c0aa83ba14545cafa88","size":1116,"data":"","first_seen":"2026-05-13T23:41:20.867192Z","last_seen":"2026-05-22T04:51:59.702165Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4097816cb90231ab6bf6a564745819d3","sha1":"32e9e0545595c65fefea0fef74e282aa821c0cd3","sha256":"701f41730618fb5f05dcaf6acc7f19dece48c27d680006e1958046d8f1e479f9","sha512":"b436307b203b85c4bdf6b35d892eb5c89e6c1600e61038a5879e131c613c5c81b9752ac783ca8c026e79f3c09031f3a35200d47bc7308af52fe30a9f3f4003f1","ssdeep":"","tlshash":"df31c2a8ea707120508641361ad3895e391072b7ce213218378cab2b5f5a86f73bb58d","size":1568,"data":"","first_seen":"2026-05-22T04:51:59.703073Z","last_seen":"2026-05-22T04:51:59.703073Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f37b0fe9202f6e007bccabace588cb","sha1":"32f046cd71d5019e25e9189d551e99ec02605b04","sha256":"75a55e14ebbe678bc8c83d95ae333d845a5337d160f32e79effb98d86ad787cb","sha512":"0975c53a87c9a56d4678eeefbadd6a0134979b7f192092bc06edf17dd9d8934031f817055ca2fdc8583f062e903dba16456763a2526fd0b2190d75b5ed9cf978","ssdeep":"","tlshash":"f0416546dba66536a4369d3e4c5a910aa6305003cc2f7d74b1c05994df6d23c60fdad4","size":2293,"data":"","first_seen":"2026-05-22T04:51:59.703919Z","last_seen":"2026-05-22T04:51:59.703919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","size":114405,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.296021Z","times_seen":5164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/plus/plugin/js/bootstrap.min.js?ver=1606790105","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T08:25:13.438107Z","times_seen":97805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?947ea0365dd8ab01fc51bd9439b42930","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec8523f8a7308766ab8f541dcace236","sha1":"568b07e0bd113798a4f3c8de5aaffd33be283114","sha256":"7f3a0490f8a367e56841c425a9f2a73f9795def6672f0341ba260412f52b4421","sha512":"5bd4667d245bf2bc84d19f38931735c59f1f6c4c9f33d09608de90f10f02e59f6506e152dd9e1027062533dd1e0f6c4f6ab5f79bf375adc63dbd088f4e58c779","ssdeep":"384:lVJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:lV4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"82d2c9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29903,"data":"","first_seen":"2026-05-22T04:51:59.619341Z","last_seen":"2026-05-22T04:51:59.619341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf019b14e843d81d4138be6f56a976e5","sha1":"1f02207583a9d3e1eb75c6d62642e8df7dc87177","sha256":"4f548bb76bd744b09e57736aef508dcbb94436269774fac20870263a427e1acb","sha512":"7fd5a26fc9a7a491db2002fa319b881af600535a20533b833029fdd0b80ec2c37a8bc350cccaef6d32f9c1d9970a5ede211cf5c6027062c359ea8611276afb51","ssdeep":"48:c88hfqDG9Mmk2xp+phzOgOOfDPU2olo9M1CSl525R2yfuB2yfBb:c86dxuwL69WCMMUyf3yZ","tlshash":"5ca1bd29e9a76554812370768fef5008b138a503cc28ad687f4c92532fea46d92fdb6c","size":5087,"data":"","first_seen":"2026-05-22T04:51:59.704825Z","last_seen":"2026-05-22T04:51:59.704825Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2348ee54d7e4cb09cb325cd49164a0ba","sha1":"b2838e72c12eab7577b5e07ded6d68f2b38b8ccc","sha256":"ccd7a036b0cc57a762f8513c855e7727a28ec1e5c6004de8365b4612f41a83dc","sha512":"d797db867f089186314838fe37217ffb25354df19b1084000c1fdd00d4d3c6aa6ad0aad487d7731466ff2c86d95192a8367ee5cad2c5f01c2cbebfe4c0e3e9ba","ssdeep":"","tlshash":"1531cd58da707120504541311a93465d35507297cd253018375cd7131f9d89f77bb54d","size":1600,"data":"","first_seen":"2026-05-22T04:51:59.705877Z","last_seen":"2026-05-22T04:51:59.705877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"41a002211d3160a51cb2e70ee3cf6b04","sha1":"579ccb831d4e45d78c17ba3deecd3223c61682b4","sha256":"67c9e9bf3b6f1bbc35fcfdaf4d2e476b53f8e53c50326bd5fc90aa3ac90e40ed","sha512":"fc00fd0c93200faf8ac1113e1dc72a9d965d955bde5ac4f6e8ae998a7cf89259fd5606ad21af7738a3c856a6d689f3a72d178bdbbdf5209dae74f4cc1268ca10","ssdeep":"","tlshash":"bd517bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2604,"data":"","first_seen":"2026-05-22T04:51:59.706803Z","last_seen":"2026-05-22T04:51:59.706803Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119297","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","size":11858,"data":"","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-08-11T08:47:34.327658Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"c337803abc25decc57850cb5de949b29","sha1":"f7b866ea308ab8cf8dbbe0da186f854cddc7911c","sha256":"83b90a98e64e652d6fd0aa9e9a0c11f6949e782292d00ade621869da28a254e5","sha512":"651ab8c86b9f33d992a0b4ef72c5e5d2e5beae3d8d8d15dfd3f067feed5bfb95b8513dd51006c333d84481c06ff1f5be045ac96a5dcb0ee8116e3f28d7ba4a12","ssdeep":"","tlshash":"46315e09cb20106418ead23865b322a3390100d3ce06b439378d82435f5d80f50fa2ae","size":1469,"data":"","first_seen":"2026-05-22T04:51:59.707694Z","last_seen":"2026-05-22T04:51:59.707694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d61e10c2d1f551e6fdeebef2c3a0d2b","sha1":"e32cd4a355bd033ffa341b9274fd6e926b2817ac","sha256":"291760bb90e2fc6962469eb8ca38cdc24f3cd5c456e0b0780bb04063ee88859a","sha512":"5b71348e02ee004733e5f471501836ffab1d854461d102059ef0cbc5e37042b25152330fe1b57ea55de75b6e9f3f2788f46b938d1d64677749c9d16522d54003","ssdeep":"","tlshash":"b6510539ebb63650d8b7b23b2baf93582991d047c50d89123f4eb6b51f1045f3d44ae8","size":3037,"data":"","first_seen":"2026-05-22T04:51:59.708653Z","last_seen":"2026-05-22T04:51:59.708653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e1babe8792a606d3d7e06805c08bf96","sha1":"136f131b8f23081b079ea839684258359c574d2a","sha256":"45567c5cba30de81dca58cc33073a098740677cc744dafc11bb757e43ac195c7","sha512":"ae371d9bf80d7cf0d78a5b1471956a3a78f7be80327fef4e199d99586a7d8da8d30d623a6753eecb73e3bc7605440664bec81a5af91ea3fd74a32e3c46b5e5a0","ssdeep":"","tlshash":"3c41cd15d6b646042937707054ff56d43f16e423eb018915315cd5c05f68e35d93d55d","size":2133,"data":"","first_seen":"2026-05-22T04:51:59.709654Z","last_seen":"2026-05-22T04:51:59.709654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","size":16994,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-08-11T20:08:37.280903Z","times_seen":7210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/js/www/decrypt.js","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","size":531,"data":"","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-08-11T08:47:34.366715Z","times_seen":4760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/#","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-11T06:15:00.501926Z","times_seen":121768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e52a11478f68c8c5eed1db3dcff36c8","sha1":"e5b3c1ed0c895fd2e6ec36d54600e80dc6003a81","sha256":"874cbeab642759457274e032999fc7a0f656efeac35c5eade18acfabfb7f8544","sha512":"4242697b97c532eac834712ba257db99a9c4d2133aafc1ec91c88f427cf23d874c3343bcd2db4f8225be03b2f5ca30df00a92b0b25794a66b777efc3f1934a61","ssdeep":"","tlshash":"1651fd6bfc6304381eb761361bbf838c3071150be905e908382e96d4af36d56656f6f9","size":2874,"data":"","first_seen":"2026-05-13T23:41:20.876766Z","last_seen":"2026-06-06T23:09:23.002804Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","size":196335,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.297234Z","times_seen":5067,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/#","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-08-11T06:15:00.501926Z","times_seen":121768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment-countdown.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b855d61646fe5669c4dcbe0e9a9e4e3","sha1":"4673ccf3cf63a4b851618f6d298e865b01892654","sha256":"96abc335fe64b7dc248c1ebfcb5ca7f29f2a207c83f368c560426ead6f502aea","sha512":"4b4ece357cecba2d7ba1bed9cbc85180451ff64149ecf88f75dc85d41e244c9242ea0521e7069fac98787b04291d737fff0e31d7e3f0f7a64e80a94b565639d0","ssdeep":"","tlshash":"32f05cfc23f234a27dd96054369b9b8e18e7cb2188c48404e4d306fc1a7af0a1127d31","size":468,"data":"","first_seen":"2025-05-06T13:23:13.662834Z","last_seen":"2026-07-19T11:09:23.439194Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T20:31:47.317823Z","times_seen":25050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/js/www/login.js?ver=1606790076","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","size":191,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.36854Z","times_seen":5064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plugins/jquery-ui/jquery-ui.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T07:05:19.383595Z","times_seen":23065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/moment.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","size":127757,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.282352Z","times_seen":5121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"102ba19aaba2e4c5ad004f6be13c3e75","sha1":"c6e87ecebf6969111945a4ae005d55f2751d8345","sha256":"69a2fe862186304563b44ee56f9fab70350eb5ed311c9970018f7977cc7f9915","sha512":"801e9d7d16de60279e95350ea61f5aaa8c7f8fffb9dd7dc79179558a299bb32d712332b8453ec50971791ed4ba588e119ed34fc99f354a000aa68d16fd229a67","ssdeep":"","tlshash":"37b012ec7b539243248d62f2ec3aca398c35313d067137a301be218d8d118085400520","size":111,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-06-06T23:09:22.966083Z","times_seen":1749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment-timezone.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88fb4a278aa21a9116c7c91d4091c2dc","sha1":"938a777b5afb85170ecba565280327523844ccff","sha256":"b04505388f10657744e0fb1b3d5bab6232d1f1a3144c11b3693f36447dc27a6b","sha512":"3ebf18fd3c351de2da9b6dde2b269563b9d9ec0eeefcb86a0c42aa1cb4736788c47ccc861f182846411d394fc09cd6bc68771804b9bc8391cc65ddc035541527","ssdeep":"768:9CFCFS8nv9KkkBTShRDCDnievxeIdj2k+I9:TFroMRDCDlJXjTv9","tlshash":"29331d47466e395251a28017fc0eb7c9606ed1114cd95ccb6fbc22a3ca68ef5bb33a17","size":55119,"data":"","first_seen":"2026-05-10T19:50:54.180969Z","last_seen":"2026-07-19T11:09:23.451125Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e01a9d9547170c9034e5cb7fbba92b0","sha1":"66b9a8c5b0bc9a77532b0e164f9eae08d2d14db1","sha256":"f64af0ff4f6809c5245447b56473e28a1abb492073b60e439990176ceaeb922a","sha512":"d35f8dc98af9b7e494234ed4f644e9c67e7d3a1749dd44233f37cc3df6e7ec93b1d3583797a4064b9234279e7286cf1fbf9d3c7a5c95dc1e949cc4d03a1e134e","ssdeep":"","tlshash":"9f412846e20740914cc267f828760747292004a7cf46f41ebbad16a87f4f86fa4b5a7e","size":2424,"data":"","first_seen":"2026-05-22T04:51:59.712527Z","last_seen":"2026-05-22T04:51:59.712527Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181410","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","size":2667,"data":"","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-08-11T08:47:34.354538Z","times_seen":4091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"318cd9db2b48bf0c13d0be32c8aec2ff","sha1":"d8a35e01884d5a1c67d51419dcbe6ac7d51d0b54","sha256":"81816437dd2cc8e95d4bf23dd8db65c42caca68148d87ac99f08c180365d9e10","sha512":"543d32587ef6bb27777a2602bb85b068ed9254e18ff9e856efec73c60c29f72fa5ebfbff50c45351978e60a649bc111e7eb1ff1ab3a8466bb62aabeaeac56010","ssdeep":"","tlshash":"8c4122fdf4e814004537ec7cac1fb19f35afa00ae04cc830b9b660c29e212c85597e96","size":2213,"data":"","first_seen":"2026-05-22T04:51:59.713365Z","last_seen":"2026-05-22T04:51:59.713365Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1f54933999bfea42fd02874e6cf52da","sha1":"f497e1204dffea7d781ec239e7e3eb3b94fb9942","sha256":"4702754efb5272a75ee5de85bd04a67309b052fcd176ade70618631f5e55ba0f","sha512":"7d83934d188e2e3e3ddf3fe317752534b50a2149f7399e31103df24f6c06e141f07291e3bca2e692a4fc3a3388be377c8c226628883fac645c1a61c0c5b4f66f","ssdeep":"","tlshash":"28419246d3e56137a52aad384caee1169a318003dc3f3c74b9c09a54df5e62c90feae1","size":2261,"data":"","first_seen":"2026-05-22T04:51:59.714305Z","last_seen":"2026-05-22T04:51:59.714305Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"928f93d12cf250ca4e0139c38fdf7f33","sha1":"e4b6c150b229c0f12b355fc2fb10460010e4ece5","sha256":"fa1d88b3f7e313ca24d861dbbf0b0c7b4c8e2bfef04f3443ae98bb7aa426e0d5","sha512":"4f2f423a0f9522515d3bbb719cbbea6263e4a7ecbbbab5f47b71a2f71d73acdf80667fa63fe1ce516e5d8844ea03e9ea604d4311a240fbcccadf4bfed30da890","ssdeep":"1536:IOpSD1Cb6yVBXfW1vCUUdQQTj06HPU3qQFSNF1T7GbF/nlzUIKnCIioTYnv2BcY:IOpSDJucXUdQQSu1T7GbF/nlz3ga2Bp","tlshash":"00e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150962,"data":"","first_seen":"2023-03-29T23:01:19Z","last_seen":"2026-07-26T14:48:45.50749Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/main.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","size":1933,"data":"","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.339387Z","times_seen":5061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b410e81239854071c6495975c1b27cce","sha1":"a899c00193b98f285a306ca00330a6f65226555c","sha256":"c9d723767c768761865f9fd4d4d8d71ef562f17b568b662ed74a6ac37ab42c35","sha512":"8be658cd392143beaeb19831c25b9a8cc6d0651a52d211a87872ba72e84fb1776dec811e9dee566d12efd87f389b725e0736f3e89e1526d7e3e3c2e78c27d885","ssdeep":"","tlshash":"e431260bcd0a22a3556284701a193268319004e3cf0034453f6e82181f4f20f21f25cf","size":1837,"data":"","first_seen":"2025-02-06T13:26:59.985372Z","last_seen":"2026-05-22T04:51:59.715196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/plus/js/unite/crypto-js.min.js","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","size":47992,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-12T07:40:13.836855Z","times_seen":77058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ecdcd50425e8b20ab074f3a17ee1443","sha1":"2ce22bf0f412e88825a631d71d6fad357e69350b","sha256":"cc7518d7ae1044387484e4d3f64a7a9dde1f3f9a3870918f1f36a17f8492c308","sha512":"caa91edf3e6cfb5d6aecb8c974540e1772fb9987283285920c95ab7b9548d91423167e88bce928601e78b62afb7962be17f0379f52ec78618e472f7660a977e7","ssdeep":"","tlshash":"5e8127a2dd1402b24196633236a30b522a51609bde513024b7cd95b44fce69ffeff6bc","size":4013,"data":"","first_seen":"2026-05-22T04:51:59.716159Z","last_seen":"2026-05-22T04:51:59.716159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b91901c292a686058cc8f1c821d09b4","sha1":"3dad35ba3080a012f9c427c5a6bf7d6d5f5b90cd","sha256":"711a5f8bcafd32af43fde1a90b9a52baa849f8003597f8bd496096b91be6f0e6","sha512":"182415136572dca093330c1465a02311cb47b09cb8577278090b0887aa4ab2c9648c259c58c3a8aeade8375a2204942a5c09564b11d82bae4d0fc246a8603117","ssdeep":"","tlshash":"2951821af4db86280473367b97bb62461d36154fda8ece08be6c0fe08f2a2565192708","size":2746,"data":"","first_seen":"2026-05-22T04:51:59.717083Z","last_seen":"2026-05-22T04:51:59.717083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/js/carousel.js?ver=1637918556","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55f280dcdbcb4a968d8f6364a2714e5","sha1":"7815466d8a2584bf137ad80138462b39cb62d236","sha256":"c2e540b8dda366b0898cc14ecda800ce2787ed2222b6ca38f67444882d8abd75","sha512":"f8404ad28595dd418ca26a6a7d1a984eb38d7a83ccee3286ed90c34c3c72f7c57cee42c59281ee9071b32c30c0c91d4d5ff5ff40c5741e75d611c1b7a8b15485","ssdeep":"","tlshash":"cc411124dd7214389533332991f7cb45ef2ea767a6418ca770fc4129afb0409569cee9","size":2266,"data":"","first_seen":"2024-12-20T12:48:50.204122Z","last_seen":"2026-07-19T11:09:23.445716Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b70f48d67bb08ad9e4867c281f6bc723","sha1":"b44f9c710b5abc5906c6940e78f9765c9e424df1","sha256":"f4a103490bc12d32b0d29266a68c59092cf1fff0b8f363477c5aae9f8236083a","sha512":"951f213a948682e2b57ca7bff902b15de05dec0eb96c41bf05b040f9cfab2aae6b1e7de48fa57b859ce2e10a7d51d1ea16d7dd199d2375e7608f853ac726bfa9","ssdeep":"","tlshash":"ee415ecec1ba2876068fb4361ddf2814995361f7ca8829253f4c81212fd521d8dc776a","size":2095,"data":"","first_seen":"2026-05-22T04:51:59.71797Z","last_seen":"2026-05-22T04:51:59.71797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T07:05:19.383595Z","times_seen":23065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"68e5ada41426eebc605302dee51e3c41","sha1":"d4bc043a1a9da5b43e0e8b70155f763fa8dd0f9a","sha256":"0bd9e802098580d9fd2e7e1a57b956d3de9143287f5ca240d0b77083c75b958f","sha512":"4e378af0f8cda5853b732044abb1c2c23908c0a3337d831d84d30f0ff3dcb62da22e018a2ba8b2966d5ae25f27800ef5f8d072803fcf1e937ecf7a2f88c37e45","ssdeep":"","tlshash":"00517bc5fab153a0593b14b66cbf510a6d127407fe0bf52af14c56d05f2841c31b9989","size":2665,"data":"","first_seen":"2026-03-04T08:07:04.862448Z","last_seen":"2026-05-22T04:51:59.718953Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0d662149e7c359b850282e78f95c52c","sha1":"229011d6215e561755fb7448c08a7fb93c66836b","sha256":"2eded53ed47970a0ffdc595145ccfbb35ae9fe4ee3c44d3224f7eaff24564f8f","sha512":"017a61bf69e02d0535192b64d20dcad06abf5d6212e6cccfb279ea04e865036ab5a0103bd8e8db914c354ab452b6e7ae6714f8d19e2645131acf885be6e592d3","ssdeep":"3072:xAGkFbIf4grvTKFCHZ85uVSq5ORbHCFwXt+wkeEqdCNRtRm2:xAG+qbvOC34Wt0t+7dqOc2","tlshash":"73e3125bb1cacd6580cdd6a285580f4b1e78065e4a4f5af684edc4ebf1c7e4cccea821","size":147091,"data":"","first_seen":"2026-05-22T04:51:59.720376Z","last_seen":"2026-05-22T04:51:59.720376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf065198574a0297f5ade08f965f3dd0","sha1":"e8b1dd7b90e85f7abc2329942a90778425044fac","sha256":"d9cfdb6a1765fbc3038ac8a841830a94f0ef4447bafcac009b45a99585313061","sha512":"8c5acde815a9927ca960d40bc573a9738c7d50294150100cc6e1ab9415215590b4f490625485c3e53f10465422628731aef861f03e7ae16cd2496dbf3cd592be","ssdeep":"","tlshash":"fe319a1cde1a484229e1cbb80481164226985583ddb0fa2fbb9c96806f6e02f97f26dd","size":1639,"data":"","first_seen":"2026-05-22T04:51:59.721434Z","last_seen":"2026-05-22T04:51:59.721434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b06cc803ee09a0be4e6b9c1e7848dd32","sha1":"84b239c304566d769ee4f67216dc7d1d9e92e416","sha256":"69474b64142dcad68fb1c2a1af41018d09892e1c6feec792b553b7449e503886","sha512":"6ef1585660640ce8363aa267dffbe125d3b5536e7183e55dd8240c9c6be0e686f785f6e4144d8781b00b89f0a96333f2a51bfd4c553e9832ba8e10c4827a1425","ssdeep":"","tlshash":"f431c2a8ea717120508641721ad3495eb914b2a7ce2130183b8cab272f5d86f77bb18e","size":1544,"data":"","first_seen":"2026-05-22T04:51:59.722403Z","last_seen":"2026-05-22T04:51:59.722403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4d6f8180ed87f01d75cb1a25c33fc29c","sha1":"cce326e5cef470bac6940e460f8017cb93c63212","sha256":"43d6aac94d80354679c65747dd156722fed7c7bb8874d9a847912c0b1d12d32f","sha512":"c2677c2cc53b0ac4817b855e91447920b86530698de698a4c3cf033e5d3de3ca95f9920aa340e842a99e1aabba8fa97923bf8356b2080cc74e50c2e9d1056f48","ssdeep":"384:4jJ7TnNZ6gzNSv58NBK3WHw9rP/+XjadFlHRh02jlq83HWt2Rew:4jJTnNZ6gzNSh9/xljlq83HO6N","tlshash":"e833519018fa147b557390e23ab52f1fae95f143e50ada0436fc5f88cfe7d86a4231a4","size":50725,"data":"","first_seen":"2026-05-22T04:51:59.723398Z","last_seen":"2026-05-22T04:51:59.723398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner2.webp?ver=1774418209","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner2.webp?ver=1774418209 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25410\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37921-6342\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:49 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HscBQf0Gdx56t6qUqbsLD6S3cXDar2Fa0Vtc8M6RBbS3cUYk6bxZjYrVSJsD8w%2FDAUOKwfDJD9xTXdgWqHKRjvbmQFsYFy9%2FG8cbCUL90kY4SwfeHyR6kOWCkw5zUIJtA9R0QEw%3D\"}]}\r\ncf-ray: 9ff934a55a29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51ebadc9c6f27360cb2f565f29824c14","sha1":"7cc5918d464c8819d63f0d1316de73e97923b041","sha256":"c3ed7abc5bc673cff3a6677bc2243a1cb86823ed5bfcab5a66ee4f78d4dd0c7a","sha512":"f4efd2e7174184726c15c64778030ee59459059c678c09a8d0710d962b2e19510bf4da635508a91e2740a77aeec6082a45174dd2ccf6a25ab471ab69f8249d10","ssdeep":"768:XOG3UqcxvGZKKrmo2ouWYw7sgGa5VnvNV64:Zkbgr7uRw7aa5704","tlshash":"13b2d0c3d36753ac018286550ec9254994fc17fe845c9e2293e442e2712fbb97f3e46b","first_seen":"2026-04-08T10:41:45.144225Z","last_seen":"2026-08-11T08:47:34.31061Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner6.webp?ver=1774418209","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner6.webp?ver=1774418209 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42474\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37921-a5ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:49 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fZJM4o9%2B8J9Tle1a33RKncGGzHw8Fg%2FGrn56p%2BJ9vmVrvwNw7zrbywTICReBYvcdrw0KJC7AhJd1B0Gw4X4GWTmXsa8W7RhTv%2FGVkhbq3023WNeHb5szVFc3m0jynYh70CV9I0%3D\"}]}\r\ncf-ray: 9ff934a55a3db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6531f7e9c5e2ec67e163a0f42b2f074","sha1":"3b45a5fbd7713c8279baa992599c60356b76bd18","sha256":"41628e52e2c3de6b72d4c5403f43c950a22ffb8fae7081956b40c63048ff0893","sha512":"c78e9a8a7c0cf495f8edd5d0b3ecc58fd55fbcefb0733434a3c031dc96187735978d407d9368e7e8a2864a8f216c6288ae93f7e551b28fee8b8849925ebf41e6","ssdeep":"768:Sbp2tD1Tjet/YGbLk+OupS9zJd/5Iq/5lHUU9xMm/WpSg8RUML4lmpBTWVTVyifx:giTjet/YGU+OupSl3hL0U9xM+WFmpB0j","tlshash":"0113029a59f0f62dca8445f5683821b85c9a76e532584393c62fe0f1706b3137fa38e3","first_seen":"2026-04-08T10:41:45.19044Z","last_seen":"2026-08-11T08:47:34.370764Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-gibraltar.webp?ver=1774418177","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-gibraltar.webp?ver=1774418177 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 518\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37901-206\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:17 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2Glf1xlFnY%2Bm9b47x1QCiPW31srV1I7rjl2BAHBrH7GEcjujGmp7dK%2FihkVC6QMG5KTp1PMXsq9SZ68uvejq9lTS2g4CBDbSkuWAQICkh0PNEnp3h%2FvbauCRyhRWM%2BLNCzCYT8%3D\"}]}\r\ncf-ray: 9ff934a56a85b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25543b3725f4b1bce18a6cd3aed77029","sha1":"5725dbd78138ae3364bb156ef07b39550dc596bf","sha256":"256d7c3abd2614d1d0b3650855455787f2a1baff7c24faad2037bc3727a6382f","sha512":"828874104fa2aab8b1168e1c92085d5f969f3f4e4597f9cbef6661705e4537be7a4a8e29f656a6ff49c40069c8af54a92dba03b067688155f7d2a35c2d2d38d4","ssdeep":"","tlshash":"b8f0051e6734609f5b744c7d839ea61f49b5683cd76559861c9094e0001933776a7942","first_seen":"2026-04-08T10:41:45.184442Z","last_seen":"2026-08-11T08:47:34.311504Z","times_seen":64,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/jsencrypt.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/jsencrypt.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tzgkq2lpSjzLiaKKd4rtp3TbmWZoTOh5fUOu%2FMeM6C1szGm%2BtWyxwHWl6Jcb16R6XQuRbmVPWGpHh9mZRP42VSBJXybYH3c8AL9%2FPJtm%2FxJUWuuWcwuQZRIINMGuJyL2zUNq6I%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-db4e\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a58acdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13814)","md5":"64507221feddff84c80b99c98827d76c","sha1":"5c7000638c6bae1a1c448367822a8682d59d371f","sha256":"5a0be406a1bdf94a25a9d142d4124e3dccbdeb5593cd78fb0bd234df89dd7389","sha512":"cc3beba9e9c0d1e149642c41b2bcb351972f8a1bcd9445dbb5e32feb6c91c5d851e2cecad5a6b3f8b8ec4727e4e8cf9824bc80244baeaae20023c23c1a02c2f0","ssdeep":"1536:cJxLSEwwmr2yZPp8yQPj6OR1fdfqovoRonm7f6T:cPErPp8yQPOOR1fdfqg2l7f6T","tlshash":"cb43e9853ae6b075039a50f0051f084ab13ab92e192f44ecf699d8e17cb584d637ffb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-08-12T04:29:16.680828Z","times_seen":20546,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?947ea0365dd8ab01fc51bd9439b42930","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?947ea0365dd8ab01fc51bd9439b42930 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11297\r\nContent-Type: application/javascript\r\nDate: Fri, 22 May 2026 04:51:29 GMT\r\nEtag: 3d2e9501fd27a7d7e64b9c08da5c9dc5\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=AF585D1AC74814F9; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29903,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (627)","md5":"0ec8523f8a7308766ab8f541dcace236","sha1":"568b07e0bd113798a4f3c8de5aaffd33be283114","sha256":"7f3a0490f8a367e56841c425a9f2a73f9795def6672f0341ba260412f52b4421","sha512":"5bd4667d245bf2bc84d19f38931735c59f1f6c4c9f33d09608de90f10f02e59f6506e152dd9e1027062533dd1e0f6c4f6ab5f79bf375adc63dbd088f4e58c779","ssdeep":"384:lVJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:lV4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"82d2c9a9b282713293a324a5153f324ef07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-05-22T04:51:59.619341Z","last_seen":"2026-05-22T04:51:59.619341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1499,"timings":{"blocked":616,"dns":1,"connect":200,"send":0,"wait":266,"receive":1,"ssl":412},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/en/NCDBC_210x204.webp?ver=1774418305","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/en/NCDBC_210x204.webp?ver=1774418305 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7056\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37981-1b90\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:58:25 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfCcg5hrhDpBmadYurZZorHHoUu15c6TyvK7huAhUoKWMWCk%2Bu2Q8kLW6sNLeZa73E66%2FNs5Plci48BsUccXrfXdacwMhC9WyS8%2BeP5%2BG3i8tecVR793nj9J09PDt%2B2WnxUjotk%3D\"}]}\r\ncf-ray: 9ff934a55a57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df77a0f52f18d5fca5aabb4cb764e8e3","sha1":"68b39f88910b1aed54e3b50c61359b7d16763359","sha256":"e3dfb41b01553ad283faa82fb64f730d00b5c20b1dfe08e8a49501f755ef818d","sha512":"9ca1678006eb1999de6784460085988fb6106f1b2359707891c95555fb40daa179ca4e0974ef91574c9322aca441d39bd6fcbe3d0c08ec02ef8b6c3484f6641b","ssdeep":"192:sd0WserTBdvjxO7JgGjvbZxyykRI96kn+Lp46:s+QXbxONVZxyySI9Jn+Lp3","tlshash":"ece18e156f12dc000e05fb45abf0b84b35174ac87dc1b1779ceaee6196711eae2468db","first_seen":"2026-04-08T10:41:45.195408Z","last_seen":"2026-08-09T21:59:44.929804Z","times_seen":31,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery-migrate.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/js/jquery-migrate.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Obw2IonTT2167iiSW5MXnmXn4%2BhGASxNhLf2dPZ2hWbxb0alkCX85fldubZwmw6vm98vJwHtNPzbN2kJVF0ZIvHaY0vZ8UoBXM%2BxGfEphwQHDLQDFBd2%2FkVnF09wThrFb2rJDx0%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-1c1f\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a56a94b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-08-11T20:31:47.317823Z","times_seen":25050,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/unite/login_unite.css?ver=1614680240","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/unite/login_unite.css?ver=1614680240 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 155\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 170\r\netag: \"603e10b0-aa\"\r\nlast-modified: Tue, 02 Mar 2021 10:17:20 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzFUD%2F5TVxddKrscZZ76%2FJZTFsAa3elEfc%2BLKlM2MHJgjb3fzDnDjtZR2%2FcO4EgmFPvDQ2c9x7wLtwZc%2BuOeNxdcawMe3BHHobx5vCEwNKuPIGli80HXpPjwWqVgcAC7xfe6x2c%3D\"}]}\r\ncf-ray: 9ff934a529a2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5aa3dbf621e04d73e3a023b18dd141bd","sha1":"f35345fc401964592d37688e641b86f9eb3931be","sha256":"dcde9ab25bde6d1827a49457a7ef72e7e177ef141a188e074e23a9136ca2ef66","sha512":"1bdbd3e8c6e1dcd6e4381ac29ad636f9218a8ec0a972ee77c1ed1a4805d7d4bad8d776de93ca554d7f116e9a1f01873d6f1c048ed348873b78b5d3d285e5273f","ssdeep":"","tlshash":"d3c080530c954f57d50786957c9e87029b7e60209e548f1f1c341878da85f2461fd575","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T08:47:34.346277Z","times_seen":5050,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/USA.png?v3","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/USA.png?v3 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 60661\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69e19c77-ecf5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hGcjiFFXXe70FNiAMSbkrshrxkXgSH2ozSnh8CeNEk9iSDD%2BNHtbYnjFvf3eab7nUvSjkNUCj41i%2BXIfMWELWc7Yj2Y%2FD05k00F%2BuMDIC0zTfHDXz1uxDznTsInkKyjchyyGMo%3D\"}]}\r\ncf-ray: 9ff934a539ceb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60661,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 236 x 227, 8-bit/color RGBA, non-interlaced","md5":"1c6c8b7a828940378aba6224d5f0cd4d","sha1":"62cde70bf8216da450e9693b69b103b30108ea4e","sha256":"1e359bee231ea72f6f3c30bf75cc274b2833c2eccd771d3918c24b229edbe4cd","sha512":"968b08d7b7928874e57d5e01681d2f46136aa7bc78fd8b489b09be2dbed52062bbda69359593b6e2282ee9de107e78ee07566f1b73a1733ac525b06ef3f852fd","ssdeep":"768:d8LcTwob/5RKWP/p0sqX0XnYMvyJSoT1gNacD398oWkTdOWcizDxLuBa67NY41Qg:iwTwoqWqsqUnFvE9BeSxkU5ID96jcPI","tlshash":"b15302873d505777c2ee49c788baa053ff41e67902398aabc624b14d29e43bb45f0a0d","first_seen":"2026-05-10T19:50:54.190065Z","last_seen":"2026-07-19T11:09:23.454692Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/header/common/kefu_icon.png","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/header/common/kefu_icon.png HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/custom/header_custom.css?ver=1685593131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:28 GMT\r\netag: \"5fc87427-246\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Thu, 03 Dec 2020 05:14:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 582\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6fQtUWzxKCh%2B5ZVctQuPlfhGrusvh7%2FzbMea916Hax4Fbng0SN0p1HzYONMkXHfpPPqiI7zj5eLGyUdIk5Y%2BPL4oxJLVlquETFfHgugVMXVTFhH8KA3LR4qOJyiWSRGWq8LNIM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b8a8afb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 16, 8-bit colormap, non-interlaced","md5":"d66100dc3b6143ccaab68587edf59169","sha1":"aec841ed002d6f0572b1bc380212d38be5858728","sha256":"cba9dfe544df0c8b71bb9881e1d77b9be08007df320acfb8398c9b636bc1afc5","sha512":"a5db92a6bb8e2bed2268ba81ebcfbff6564ee50d09ed94c2302cbafb4e234cf9acc99d585568adb0de318e38e790467cf81fcb05643338c7200277a878d04d73","ssdeep":"","tlshash":"abf041ded0770db9f6a8245ae0a20980fd525a1c9ee6534e2a9ce04f08ed0049ab6746","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-11T08:47:34.283799Z","times_seen":5053,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/bg-sports-right.gif","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/bg-sports-right.gif HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/common/index.css?ver=1700473959\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"5fc5abde-3b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:10 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 953\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0pwrdVLml6zFqL%2FuGmrfBVEKbUANfP3vKcY9WtfUhA5CtJB3KfXvVTIVAuGEc5Ps9JdvDUZPuesT2uhSGiPMmsKE3dcPzGERJGxGE9HNXpRyxb3PyGVI54BQ8ygmhgut%2BMFYQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b938b4b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 204","md5":"0c494ac95bb7efed1bfd157c74edf4f1","sha1":"5a39f256a6bd4ae42af00ede6cc02046247ade55","sha256":"8bd961ea74a57ad2595a735d5a413caa795d27db0c0b530d749840665b0f4e0d","sha512":"215412f750059b020413cacf06b22f3441f9d30a1f9cd3562bb8acf12ebcb1afab8462a97060cd547afa4b618e010a6618071b85d6da1c53c809ac8872c29ac1","ssdeep":"","tlshash":"6e11021170f41d9bde5545705de179214c777111071c0229da185e24d574af7a8b0745","first_seen":"2023-05-01T12:07:07Z","last_seen":"2026-08-09T21:59:44.921417Z","times_seen":1340,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/csrf","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /csrf HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im1BN3NXR1RBUXNHbEMyNVZWWFFpK3c9PSIsInZhbHVlIjoibVQ1cktIUWV2cHlpdElzc1ljTTVCQ0VYR2orc0lXSXBoVFVPUWRHbEZkK3JQRHozeDhyaXZSVzFieUpUWENuazJLZGJhYXdLVkFwd2xVYlNEdE1DR0E9PSIsIm1hYyI6ImQ1Y2UzMmE3ZjJhNjRkZDFkMGU3YzhiY2NhMmQ2YmNkNWYxOGY1ZmQ2OWQzYTU1ODRiNWUxZTRmMzMxZjBjNDEifQ%3D%3D; vanguard_session=eyJpdiI6ImxENWVRZ2hrdFh6VldLUUo0allabVE9PSIsInZhbHVlIjoiWTNmZHdPanI2bGxtMjNZYjlKRHo0eDZnWXJ3RjNPNTR1VEFMMVQyTzJhSGliejFsTTNLdGdlUXJRdDZvQTNQS0djWjc3UytONHd5WFRTRGZoSUFrY0E9PSIsIm1hYyI6ImVmZTc5MmUzOTM1MmU3MTJmMDg4MWE5OGE0OTQxMmRkMGJhMTliZjUwMzRjMzJmMDJhMTNkMGVhMWIyNTM5ZjQifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:29 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 40\r\nConnection: keep-alive\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IjJIdk5ZWlhnd1V3YlwvZHpHRnFnN3dRPT0iLCJ2YWx1ZSI6IjVTM1BZMlNZRjhjTmZmekpEbXJCOUEybGkweWVTQ3NGVzJHSW0rdGY4WER2dzdZTnZhSkVoNldDY2ZOQmdONnBhRHdxWTlNcjJpWnNvSGNZKzBMWVd3PT0iLCJtYWMiOiJkNzllYjUwODBhYzlmMDNjY2RmYWVlYmM5MGVhNjBkNzliNDc4ODViMTMwYWE1MjMxZGNkNDIwMDkyNmVmY2Q0In0%3D; expires=Fri, 22-May-2026 06:51:29 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6Ik81eWxwTTJaa2FuMHZKeVlQa1IxaEE9PSIsInZhbHVlIjoiamx0RG5NTTFHVEV5SEgxRE03dmpUT0RLTDB1eDRcLzBlYTBzbE5NM3pcL1RzQkY3czRMcldKc2pjaWpFUDJtQ3ZXM2lDTEloVnZlQ3ZXUG9qTGR3TDA4QT09IiwibWFjIjoiY2UxMzg0NTM2ZDYyYzcxZWNkODc5MTQ3NzMwNDk1YTA3ZGZhYTI5ZWUyZTMyMmViOGEwY2JhMTQxYzM2NGRlMSJ9; expires=Fri, 22-May-2026 06:51:29 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nExpires: Fri, 22 May 2026 16:51:29 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: BYPASS, MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9a22e32708a8bed50d85481829833f1d","sha1":"c319d434466c3e3e98fd149e070536fdb8e6368c","sha256":"3713473a2270653605e6ef8d6365f340729caaf52a9cb761bf33fa6e29e3b9cb","sha512":"32a141103d37eae4cdea7125d08be5fd0f3dbcac5e0545a84b980b8881d58dd9f7a96cc2ca7433749b6eeb5f14afc0a84b0cf0a9e39c3a140917880cbfba98ad","ssdeep":"","tlshash":"ba900400170453133434d4f11557c515f0dd00c0305c35d450c3c43ccc403d3d074435","first_seen":"2026-05-22T04:51:59.623435Z","last_seen":"2026-05-22T04:51:59.623435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/custom/float_customer.css?ver=1606988918","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/custom/float_customer.css?ver=1606988918 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 396\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 1255\r\netag: \"5fc8b476-4e7\"\r\nlast-modified: Thu, 03 Dec 2020 09:48:38 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEw3FYjf85N8vPm9FAMqAJT1seF4106KfkDqhp68zCiyTha3eclFrHKkUyY0%2Bmo5KInypLJAAC3vRSAi4kZ03UVVzXinuw5d75vFwm%2Bc9yMEiVXan1SabxApvfNKJBk5WMsqEAU%3D\"}]}\r\ncf-ray: 9ff934a52996b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b2ded9fef6484909b432df1b9613a951","sha1":"a59668f14d035f6cee87c7b562a548b323ce61d6","sha256":"3416fbdfa440bafe392cd154e2261884dbc2d790491adeabd66415b1e1332323","sha512":"c5f3ad8271b2f003d72eecf4c879453c33f2c1f9e49ed742b7c6a13fe83fad3374ee0a76bb49d22d834fde12cf715d51fafbb933612a83bf4001d73dfcabd417","ssdeep":"","tlshash":"4f2170930d272904bc19e1752fc4013e222a80cfaa5fdc1c76d99b1d5fd266c98a6be0","first_seen":"2023-04-27T01:34:54Z","last_seen":"2026-08-11T08:47:34.326507Z","times_seen":1750,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/26fifa_logo.webp?ver=1776393335","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/26fifa_logo.webp?ver=1776393335 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2114\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69e19c77-842\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRw3F0QjSZIN4zPucJw2eBEIRB9Jb7y0hPmB4XlzCmtfX1Gz4oWniC%2FXGYAORLRNCMaeLl7bc6GPYco%2FzqiH96du4FtJBvXH%2FVVHRc2QfegN2LMQladAqdTsrE8Drg8FOiGznCM%3D\"}]}\r\ncf-ray: 9ff934a539c4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a08bfd51ca8a86b59e0c98048f2f9368","sha1":"df447b2230d7b2ad6c292aa97e7a1095c13fb892","sha256":"03f8465a48fb1369eb2170fa96e8b530feba529f97107daefc650d7036369615","sha512":"09460734222e53f6806177440162a27acd4f87a545ae442b14795eefc95b28164410ea8ef8ab11fa68bf12eac2b886736dc742d501dba2fed28304e7f1d5b85c","ssdeep":"","tlshash":"e4411962aeaed2098cc618dceb28b340222f32bdc434475555e307c612346db3f0aea5","first_seen":"2026-05-10T19:50:54.179265Z","last_seen":"2026-07-19T11:09:23.487456Z","times_seen":22,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/sweetalert.css?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/sweetalert.css?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5fc5abd9-59ad\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLKqlIGHtO16AxjMZQ%2BYWzuUka4Gi%2Bms%2FYWhcivYs%2FOpdOlXaItOW5DGIsnOUxtQLnqRYTnWuriz%2BhTiZ0dGnkO3nZlJm5UPWnCipoEMHwodxoYQfJuRk5L%2B7WnPpWkS9CyKQSU%3D\"}]}\r\ncf-ray: 9ff934a539cfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22957,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8cc26070373f41241f37ce5a9c9d885","sha1":"3ecb6f91187c0153724c950efcea0b0d944fd5aa","sha256":"460df149ba9d2eb000637d9bfb2df51c5080a19e9071ff4ed5a4b7e21a0bd2f1","sha512":"a10fd7b306bbe186c50c35066e45fb6491741c8ab161d6e8447069aa919e943b00768a3b65180195d68f6f2b7f4195035247d0b9115e5a758189a60bc1c04533","ssdeep":"384:MrFKaS31F8FkfZ6vFyFiFz2FFF01GF7xGxTxGxJwdD3qX1YtiemnEzpazAP:MrFKaS31eFkR6vFyFiFyFFFhxGxTxGxe","tlshash":"5ca223eb1de31284a727874553de4b2827384043a81bdcad77cd519ecf81eec21dab56","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T08:47:34.317807Z","times_seen":5521,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":108,"dns":22,"connect":3,"send":0,"wait":872,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/promotion/images/uploads/78.webp?ver=1774420025","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /promotion/images/uploads/78.webp?ver=1774420025 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20190\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c38039-4ede\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 06:27:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CxEEj8UyMBORcK7%2FOtHR%2BTEe%2BswrYprQlwy6gGfnQ2bnqYS7I5fCXSmdWQRU4e1N%2BppRJDL1VxVK72QgP4e4xWgr8pbF96%2BuLSfos87iMPQboH5XSD4ejb385Njm%2B1yHFnAnl4%3D\"}]}\r\ncf-ray: 9ff934a549d7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 736x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bf41c1b6982ed20fbed27c8aa97ce769","sha1":"9f22f1eae6a1b2cac0e69b4d0baaf9a649fc2a56","sha256":"ffc1f1256705217ab2bc82c68adfddf1974909e6194eddb1eb1878053c0f8514","sha512":"f1b50ce02199c77b2a95ce1c0b8d66cb1495e64d4a00eb05f63aa7bb1af1e82970de948481b92ff4f47959316815aea89d321ead1df554b201078a645fa1e9b3","ssdeep":"384:FHq/zcbZMBtF/P8QrG3f/i4f+2RVXNEtq7QzQsj7I/aDsLPVqaKgsbP:FHoGZMBtN8mG3f/i4fz48T67ISwLPVqf","tlshash":"a092e1836d4a5717a2d5299337e0f7914045ec7b87bcad3cca919dc54f370c8eeaa212","first_seen":"2026-05-10T19:50:54.152837Z","last_seen":"2026-06-23T18:27:49.680325Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1086,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/js/empile.js?ver=1637918556","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/js/empile.js?ver=1637918556 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvzlQE2RETuEkRuQF4v%2FmSCJezUMRTPaXHV33W8jViBZJohAU4LojuBw76kzpRHHMOgf2zeg1hfDYc0kqj7BHyUWS5nXW7ITpw4Txi1rlyixUh99Ay7F1MbtUSP8tdzCegzsix8%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Nov 2021 09:22:36 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"61a0a75c-684a\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a549d9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26698,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a627d30c6bc0b10626ab5b2519dcc805","sha1":"4bb4096e0dd58fe05ba82f669b79d1e077f05f59","sha256":"a898bdd55d53b67bc241422495a7ea5b582be655409622c80dc992e7207e8f2d","sha512":"5264cd1c9a2e8526c666d1eafd03560e434522a35405daa6f3d05c098a10e43582cd1591453977cf33abc152be7821820b596c8e6095802da6f24b217a4c18f7","ssdeep":"768:gwl5p4zyOuB6fYoR34RXOlaKW//Qqsxlz:Ll5pXOuB6D1/","tlshash":"cdc2435d65a230a189b373f98f6e840aeb75522b4105c2643dfcc5982f74c1853eaefd","first_seen":"2024-12-20T12:48:50.32179Z","last_seen":"2026-07-19T11:09:23.465499Z","times_seen":97,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/g03.webp?ver=1774418305","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/g03.webp?ver=1774418305 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3798\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37981-ed6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:58:25 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVlvYgzixNf%2FPHY8jfqO%2BBALTnjetGc4XPpYJn%2Be9PAJnafKriAuxHYmvKr9rjoOFuIDiT14A25IzRo54iSMwoRuYKI%2FRXICplirGWhqLZ1I9FUgzYVHkFR7uXxdxVLe5D4u4Oc%3D\"}]}\r\ncf-ray: 9ff934a56a65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 269x79, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e3c1a1e9812ddcacfeba31748e98662","sha1":"c1e7fead521a2c1c94c03a3b46e4a7061c7c1704","sha256":"607bd2127a1e4263c6fd1c346c6969b2869d6b81ec3d8b914fa8502eef881dc2","sha512":"b5b4766494cee8677ac38204e9f11aa6c1db15831a0490fdca5158b247fe673a33d1299c85c0a0aa373e506f8651ad8bfecd206c7d490ed5bb11769c38ccae7f","ssdeep":"","tlshash":"d1717db552b0c9374809b458fb6ec6c6ca4ea1d4546ccf3c1f317a6b426468c54a0afb","first_seen":"2026-04-08T10:41:45.146318Z","last_seen":"2026-08-09T21:59:44.885415Z","times_seen":11,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/checkinput.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/custom/checkinput.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrJ78JG0ajn8s2gUVj7kTeHHoggmebhTdFI7LC8uah8fiVh6duX493dMa%2FfpiysrK7F5pc8uauaIKaI6zFI1cDeZIsOyhmtjH45ErIOPky61hpyHRJhu30wx2YLhP6uZ1AZeSxM%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-3c14\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a56a8cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1701a1c0e116f99b046f95c9f2f4ef5a","sha1":"c0ea303e6c96847ed6bb4c72afd3a84332ab5b3a","sha256":"5a053d48644953a4dbc5f0cb73d4723dd958c9b5574be9cdaac4bccf21d9f38b","sha512":"131b0b96f085bbabf04eac826013f7a62402bfe7e8aa4f6830ac9bdd4d629e4062a687b03a14d6c02d8ea741aea17fe4646da4c054c1954454025fa22f0fd307","ssdeep":"96:ZRORCQC5WCPCD9CQCwCGCkCmCQC+MiCwCdCuuCkCbmCd9P/ddPojcHoujp1SPZaQ:ZRRRvJdlANu91diXdT59j6IQNHYerS","tlshash":"9d62204de0983ea6857333750e7f5200f57906278525eb08be9c59b42fbe80a4b63f5a","first_seen":"2023-04-15T09:13:23Z","last_seen":"2026-08-11T08:47:34.358319Z","times_seen":5062,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/common/storage/cms/cms_1045.png?v=1611754636","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /common/storage/cms/cms_1045.png?v=1611754636 HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 25135\r\nConnection: keep-alive\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nEtag: \"60115f26-622f\"\r\nExpires: Fri, 22 May 2026 16:51:26 GMT\r\nLast-Modified: Wed, 27 Jan 2021 12:40:06 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: UPDATING, HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"55f8778346a30651b7027bba5532c5f2","sha1":"8c9d470a4a4df4d92781aca083cc15c0ba46bcb4","sha256":"903fcabec6d3da2728b5c6fcb183a9c79fe17a829d50a3ad51557905fb7ce6a8","sha512":"fb634d19c61ecf7a442d5eb6d538f0679b270478f61fc74c2ef5d84f7ff376e946e6d51a6cbacc2d8744e3bf803ad389764a26df1e418c68ca9b00503b2fe8dc","ssdeep":"768:lDIOEhemutCZwao5LalLoXgMjtSbCI16GO1B8g:l0JitCW/p7gMRS2I16lB8g","tlshash":"deb2e281d0215ef7deb5319a050b051ed7bb62f3648397e89dfcee392921a6e12e084d","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-09T21:59:44.926687Z","times_seen":448,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":928,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/moment.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/custom/moment.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBRTqcIb8%2B%2F81keHFjMDa7kDXqzIpZ4mYZ%2BD%2BL5h5WlOLmGlq1CV4waooMvy7tibf2dHfOPEaqVV%2BCrNWLaKXhQOFTCyDxM2Suj3GZaoxf4EWCZtk4SbsByzC9euawTPqxxuQhI%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-1f30d\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a59af7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e70edb526ff09f426618efade93a4782","sha1":"840b05449d3851118fc835592bd98af885bdbf1f","sha256":"ab513aa4626ba224ac61b747674e6aead965f6e2cf87a2e60c7d4645b519817f","sha512":"943192c03e09b13bbdee324fda4c81d019b4cb5178596b5c548a1e6776022aded289a6076d32d5f55f99316b57b6f7db13c6429edb3a1e6927e7bcea89774cd9","ssdeep":"1536:/cZlnfxbjbJzvdvpeG2iMuz/M6z4QZFSNwmJaxxKZ5dFR79LNOf0uK:/cZlntbEG2i8umYx620uK","tlshash":"cfc3508a69476123467267398f9f4509ff6985330a0e8605bc9d92d83f71c6c43bafec","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.282352Z","times_seen":5121,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/g02.webp?ver=1774418305","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/g02.webp?ver=1774418305 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5266\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37981-1492\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:58:25 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mh4focaJkG6bL8kY1QCQX98Kf9gcXq3OR7U2mZlnQiJGeonFl3TbQRoBMliHkKeRn9oj3hUlo64M3nZwGZ3GKIQ8DpVT%2FTaOuYizqd3rXTmGtsyfOe5M%2FeUP5bbnN%2BjM0UlqlfY%3D\"}]}\r\ncf-ray: 9ff934a55a61b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5266,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 269x79, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"98d2f7f5dda71369e499ccff82dcc1a7","sha1":"2f9a50b2b0fec7c39b8695250acdcd9b75eff401","sha256":"7941e2d8adc3561e3bac4387bb436d5b56dc6ac3c90077018ad45aa46aa537b9","sha512":"2025a1bab8e001941629c35f6257c0a9d5d575610b6f1edee383fd0c00404b5e0abba08c79442c86a773100dd2570d8765a909593f834b1848cb76f6e11f0c7d","ssdeep":"96:VP0E98cr5eUuA7IpHv6Gv7TbUylMdDX6dyvc+/jAG+hxz6wbaCqZYtHtgXXtYx2G:CE98AQm2P6GHHqDX6dGEG+hxRbanYHtD","tlshash":"31b17df039b85c4192ec752b6b7442f2e08468899e59377509b38dfaf4d3f1194ee0e6","first_seen":"2026-04-08T10:41:45.169933Z","last_seen":"2026-08-09T21:59:44.918799Z","times_seen":11,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/header/common/spiler.png","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/header/common/spiler.png HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/common/bet365_style.css?ver=1684314915\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:28 GMT\r\netag: \"5fc7207c-3ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 02 Dec 2020 05:05:00 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 1002\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGx32RHCZxTAXasuSifNjk90haVZHyoaENPV5gCTPge%2FceXVPTZE27UujnJ6kyB%2BjgKQlv6wH%2BaNbfzKBhvDUO%2FmkfY25QH%2Fa5U1Pz%2F%2Fr2QdEszozMmYQpToK%2FX6%2BWnWj6WU9fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b8a8b0b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 28, 8-bit/color RGB, non-interlaced","md5":"00f172ed66e94f4af82d9a0ae99bdb6e","sha1":"51651bc78e955c872778349074cc93aa18f8d8f7","sha256":"29895677b34f551b8cfa01b36893909515baeac1c8f397295f256ff50d379fd4","sha512":"1576e0020fb93f26e93a7393e34afe27b3456e480e29b246087b4a330efe163e36ab47b8c9ccf23f34c19941ec9221f2bcdd484535d245419e06fcdc6838932f","ssdeep":"","tlshash":"6a116188fa80a802918dd0121ceb60239d324cc0eed0f164bddfc42baa701f8510e9cb","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-11T08:47:34.285303Z","times_seen":1758,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/sec-nav-bg-grad.gif","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/sec-nav-bg-grad.gif HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/common/index.css?ver=1700473959\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/gif\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"5fc5abde-178\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:10 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 376\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XO9RbrJuO7IptQPOezZmuud47qpQp%2FHyttBi1CqMctf%2FV1P4O4RTLVt%2BrBTLTqwpBc5tiCSPAF5GjhZM7dJPyPFEu9mGfSwPxKafSQ8F9iGAvq46oNPpD0HcW21UjNFVKV1G47s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b938b2b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 594","md5":"355b2cb853d78ae262c093065eaa6e70","sha1":"3e8d2a456204e635cfe5bd959cff47faf63023fc","sha256":"cd58d657e3d79583a5722257d8770e3b5f620f1d58e392f1d9460cc89ac485fa","sha512":"0700f78d8d439d90ed2eba294bccc07451cec67b8bf518c13a8221cccf223a31c9e620f193874149ac818a39a90efbaa8748607600b01c7c0f89f89b18521042","ssdeep":"","tlshash":"04e02d731aa377b0de08ec39abcb30ba280d243eb20ab1c0300c74da85c1832fd088c0","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-09T21:59:44.906586Z","times_seen":4789,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/share_unite.js?ver=1749181410","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/share_unite.js?ver=1749181410 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdEa%2BvBmCwz4waMZC1eYiSw4hU0b8PiqjLL2YRkwzPrmG1U5e7tL66hqpVhMD0JSydSsmG6XZzFQqp8naFi01t9%2ByFGrLaUZHNmsdScdTE3JkJyuYjTvUlYrunuwYb9Y9gLVuvA%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Jun 2025 03:43:30 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"684263e2-a6b\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a57ac0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (527)","md5":"00c6288b67f7750a75b6e9abbf74c8a4","sha1":"5f464f4ce28448acc1c2fe825d4218795b023db4","sha256":"20327edf72e6632c450e8f8e443db2f728361f74b68697932491108c7f483b9e","sha512":"39dac004bb9b904ec4c4bb4d4963c3b8c4c9d98f9a80d90e53134e28c6055831652f0911e59b58f54c4b1e7156d8aba181b90ee3fe0ba6aefb67162b990787c0","ssdeep":"","tlshash":"37513127e6b82006207730a7deee346b556a8426b3417f06b7bc01a54fc58ac7f9270c","first_seen":"2025-06-07T06:32:46.623015Z","last_seen":"2026-08-11T08:47:34.354538Z","times_seen":4091,"resource_available":true,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images/dc_hot.webp?ver=1774418058","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images/dc_hot.webp?ver=1774418058 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/webp\r\ndate: Fri, 22 May 2026 04:51:28 GMT\r\netag: \"69c3788a-2a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:54:18 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 674\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z67glFgg18FHGcQrymMwVvWYweE%2BdOWcCpIRGIatEPZ56NKKW4NlxqjTkvz0klH07fvwgZWzGesaCDkL9pUx76kXa2uUhLfi4K4o%2FU3Hk26%2Fj3NkGAd1fOMwod%2B8tj9Q%2Bt6SIUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b8a8adb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f143808eb48da2ca609b6473964da18","sha1":"b6266777f586c4abd64eda24e7f9102e989d3bcb","sha256":"8233e08afe9d267e86ae889b9a47a6414a4a2147ce5a598712b73196642764f5","sha512":"6791b4348002af2134166997d7296ba2ccc10c879d73b1fb64d3b75bd5f27e511671917d4c9d7f94a4455a99c6f89c4797b03cb7004c2cf283524c6cdfbf55ce","ssdeep":"","tlshash":"7a01835ec280b4abdb215af2c09e92c9a27330a206f40709417c34ae956788be2b014d","first_seen":"2026-04-08T10:41:45.158164Z","last_seen":"2026-08-11T08:47:34.328703Z","times_seen":64,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026_custom.css","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026_custom.css HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BcOsN2XD7tqjeApeM72VsJnlnNTW3wAIKK6Hb7EZbhLvQhbMIiKw3Uy06h8jVbncwuTi7E6JOzsjyqRxXIUKcgga57ft9Q3gSzIF0n3gezZof7%2F1IXqSQNMFO4CFodOyu%2BS0Yw%3D\"}]}\r\nserver: cloudflare\r\nx-cache: BYPASS, Status: 404\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ff934a52990b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":929,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbD929N3L%2FgVOKbz%2Fbn3w%2FzNU%2FnxPvKWW6Jlkk1LW3kjpTBZpHzUiEddKodkAqk1I6TRdhoemJ2Y3F2EQ1e0692s0D3%2F0%2BjJ1XJGxmBlyZ3%2BM9z2rmHo%2BGifl4IV2i2tnpq5%2FN0%3D\"}]}\r\ncf-ray: 9ff934a539c2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-08-11T08:47:34.33757Z","times_seen":2889,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":82,"dns":19,"connect":3,"send":0,"wait":859,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/plus/plugin/js/bootstrap.min.js?ver=1606790105","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /plus/plugin/js/bootstrap.min.js?ver=1606790105 HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nEtag: W/\"5fc5abd9-90b5\"\r\nLast-Modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nExpires: Fri, 22 May 2026 16:51:25 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: UPDATING, MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-08-12T08:25:13.438107Z","times_seen":97805,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/js/jquery.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukSx92K19UMNNPxsIvxJHx9U6Hw4a3W%2FJCtBJsERY%2FI6bmXqQlMalyt38Mw7%2FhLF8wdpwcgpnOm1lIet2Y7f4G5oeKZ5H0to%2Bfh0ROYITuiO6m4E7iU5CagODRuBcPaLraZoRf0%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-14979\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a539b6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"f9c7afd05729f10f55b689f36bb20172","sha1":"43dc554608df885a59ddeece1598c6ace434d747","sha256":"f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c","sha512":"3dcae1ff6e98c64e3586be3eb14dd486c51f7d4e9fa1b8f9a628be4fbb6a9ab562f31f9b50e16d2e0c72b942bdbe84eee8e0ef87fa730db1428b199a59d88232","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:++414Jiz6fh6lTqya98HrJ","tlshash":"ca83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:06:48Z","last_seen":"2026-08-11T19:47:49.280297Z","times_seen":26266,"resource_available":true,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner5.webp?ver=1774418209","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner5.webp?ver=1774418209 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43068\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37921-a83c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:49 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCE6M5uj%2FTJe7GBfGsIHxb0Z5i0vdtafg%2Bd0579jvo2bb3HwtXznO%2Bh4h9dAnBSbLFU6fkKASEJIadP4WiG%2F%2FGL9GkJha7PV8SLKCvD9aCEFRAnbzKegUfRav8WrYK%2B%2F1kf2sD4%3D\"}]}\r\ncf-ray: 9ff934a55a34b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87c54419877c37bec94f2a634a59bbb0","sha1":"2b0531874fb5393480fec1224e08fc5c0ffa1fe9","sha256":"d746c4ae261b044909f64ebd156b49c54c6af736fd54de5f3c37b25f0c96f142","sha512":"6297f469ee0d6da6ab14596843db3d1c05e8e321ece05f2b2688f0f9b921dbef5a74aa9a5e316b16aa7dbace62afd76abe891f50bd8d6900786d8af67cda9b66","ssdeep":"768:aFqxMDqgKB3coyCYZ5ZZLyfs9cQ2nMDYsROZjdJRKfsDWGf+5:UOgMRyHDZZGfs9OnMD1RM9KTGm5","tlshash":"6013f233cf14058b2cebe11b2789e8d23b51c1b75ec97bd72472a929f2ca2f6516d504","first_seen":"2026-04-08T10:41:45.173785Z","last_seen":"2026-08-11T08:47:34.340149Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":391,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/panel_b_bg.jpg","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/panel_b_bg.jpg HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/common/index.css?ver=1700473959\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/jpeg\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"5fc5abde-10ab\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:10 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 4267\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHXuFW7%2B0TKtkOeC5mFbKIle0KMYKp1OZKBfz1DZ7bMSMfPeHtz1enDIf8n%2FJXyq6ussJ%2FALxgXj7lcNZj6pU3rds9Uj3YMKqiL9v%2FB%2Fed74c7xMAyEte4A6rD7dCGumJGcv%2BuM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b938b5b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4267,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 270x234, components 3","md5":"fee5097bc88f140446c66c0f02f4ae1a","sha1":"39e1a7314d93a6e3afee86a58a5b67a3943c8723","sha256":"7068ee30d85be9813bf2277ceff755a0c2abeef74cd5000beaa910c7dc3dfab8","sha512":"e9536da98f5bdd479946b6b68b5c51da09819fa95dd0739ff733892615e4e39584d4d6236c46a4aa9ab77ceced83f925c0fdff985480643884d74b8f799b2378","ssdeep":"96:rQUNe3tjQTuG9jZIBSN2l7IUUOzQVUAQjPkG:rxNZuG9MS8l7oOkVUAG","tlshash":"60912a079215bd4178e8a1308696c33a5b33c562d3ab9dd280f55806f6ac3d06bcd5df","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-09T21:59:44.909041Z","times_seen":1488,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/countdown.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/countdown.min.js?ver=1663911608 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KliXHsiZewDLbCjHoft%2BXfffGD%2FRfS09yzhEOy4czBf4exhU1uDPHM2BJm74iNRkkW%2Bws9657zXKXCQsf6xKQCiAzJYfTMCKzA9Z6Et6w5s6A7wCDjzvKBbupVW13zmiEZDCYwA%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 23 Sep 2022 05:40:08 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"632d46b8-1cc3\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a549f6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"d9ef714974f58eede8526db005f26b92","sha1":"6fd64709325b5b71c79429b2e5f1cc900108e5a5","sha256":"ef1fd94cfe9cd440eccc5e91db340db22ccdb298a1d4a7a0f1302a36ee8a53d4","sha512":"8af9c072b9b67f0afb4ce40ec4abdc34be452f221f3ba256be122ed34d806d6cda8b32516cd969fe6a071ace8e4e8b60d04e91c3961658a4f2f590c3f3f7246f","ssdeep":"192:7ZMj+vKn7G1N12QKdErjigRQ078bxKl9zru:iK4MN12CfigRnkKltru","tlshash":"73e163cf262215362f32529ea4af11073170ca3064045d1c97ecfa44a9f8ce765beb39","first_seen":"2025-03-03T20:52:38.658434Z","last_seen":"2026-07-30T15:09:05.077707Z","times_seen":63,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/moment-timezone.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/custom/moment-timezone.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FKBzAQFcsw3FWrOK968Txge2qvQ8B3WXnj%2Bsq7MIVJqkwj%2BYdURa5TbZcW%2BGLuw0el5e5tc4yPDmi3ZdWqsH%2FDSjkhOnXNGBHB0Jl4xqd%2B3u1xMYG1du%2Fpc1HM8kzo4naaKBRk%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-2feef\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a5ab15b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196335,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1434), with CRLF line terminators","md5":"bc45c47c99fe4d26b2b24e46cec399ad","sha1":"221067a4147ece74b03934528ad61bcd4026e477","sha256":"4a65c2af68e89944c3da128c9b329596d930ce09dc9b8ba726b640d812e1fd88","sha512":"1658e474170022d40e698a422f024b4872bff33c78af1dbe98df3a6a99a0f1cd1eb36725ac9fca7bc1264ea491d0a19a2ee0a3a952adba4aba3242c06f830f93","ssdeep":"3072:olpkvlaDD/DCD/DCD2iqWCPrMBq1rGPuAZDDD1DDWoST+piMhrlon5Blu4hK:CkbW0sNpiMx","tlshash":"f714b0292617bb44e459c08bfa3779c0caade18a940614d25f7d57b31fa37e2de68c03","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.297234Z","times_seen":5067,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/scheduleBTN_en.png?v2","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/scheduleBTN_en.png?v2 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:28 GMT\r\netag: \"69e19c77-cdef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 52719\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgxbiznU%2BiWl3%2B2YFBJnlESd8sCjelhYj4WzMgp6kOHZ0S2sTLGcvZLrvCdLIs%2B0A%2BKLtDXwjXBd%2BZ6NgnDnGcSM6in1GX%2BTLNGpZ2jsYto4ZezVsjiazTzAgprx9cb%2F19UmZNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b7b8acb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 211 x 183, 8-bit/color RGBA, non-interlaced","md5":"91d406f219d5983334e288f8b8da70cd","sha1":"6ae4bd03a4387f5d00e7297a13b6dab20f02b3f1","sha256":"822cf9f487bc3d68ef41dfa2e8c79c854b358c559b0ec8a9a42b47f1835c1e98","sha512":"3e42cada2928bd98a57831ba65e6d3721ac078254eb8679f7ecbdc28cc718c3988bea9bcaddf5c96df4de8cc4214ab84c11f001f28acdd0863f5736f0fef16d9","ssdeep":"768:7OGdP4nNkLq670ceya5vowj2lMuCTOCtjWM1a45g2FiY2tWBAjlyyGHbBeCj:7OcCkLqD5Rt2lZ2jWM1a+FxAjpIMCj","tlshash":"b033f114f84f0dffd9a7b4b3f996c0f11ab620eb164023cd8baf2c6e5059a19b5a1494","first_seen":"2026-05-10T19:50:54.161574Z","last_seen":"2026-07-19T11:09:23.450214Z","times_seen":22,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/plus/plugin/css/to_bootstrap.css?ver=1606790105","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /plus/plugin/css/to_bootstrap.css?ver=1606790105 HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:25 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nEtag: W/\"5fc5abd9-2dc4a\"\r\nLast-Modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nExpires: Fri, 22 May 2026 16:51:25 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: UPDATING, MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187466,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (386), with CRLF line terminators","md5":"8778d79f7633526cee2d636c518d9d76","sha1":"b2e715b1c401220e8165353c60d1e3b3815cdb60","sha256":"de3c1a93b240cc733fec329f2272d3b640ffa5bb736ee5df966745c20aa71d32","sha512":"13eebee14a8f011114e3352939d8f0440dcfa3a28f3f0737126b661d669914ae97534f029fab80fa9d0bfa376ec68b86b86e2fc18b5aa844fd7b8cbe397e7eb8","ssdeep":"3072:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiCYdf4Q4t1v1S38pWLgdXyLSJeFR+PfmgM:v4rq/Ei8U6V3/k1UqQGQr79YiVk/UOiP","tlshash":"a604a9989b003bc2a231867c736f4d01bf8881a195ea4d3db75f33785e679e66133e85","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-08-11T08:47:34.36324Z","times_seen":5043,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/unite/float_unite.css?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/unite/float_unite.css?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 272\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 725\r\netag: \"5fc5abd9-2d5\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udxKbJFXGRQ%2Bp7i0R51yVNmXuMOkamXNWKrRIFh7uoRrfLHRmn%2FeZOKIz2jKd47qEHbIAHpK9ZqasBgfzc2E6jWgS567V7dkYgjSuEVIbjxU2siaovbm9TNuexjTaPPx6bib74w%3D\"}]}\r\ncf-ray: 9ff934a52993b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"077a2c1ebe25590b50eae8ce89787e0c","sha1":"499751737e286bbc93a46a1d2d4aaa3e2163d336","sha256":"093a799f9422754f7e53dfcc8516d3753616de283a14553f37d58b3822fd1b3a","sha512":"390f32fe8e81d9a379c14e0552c198d5f83e650f085b1df623c45cfc1aa4076d2e220ef02a4ef6747c0cd597eeecc510a67933c26190cdc306b28ffc861c366a","ssdeep":"","tlshash":"080147d307230b40fc1ea3196fde835e142a00cb9c9ecc08366827689f4b62c9662ff4","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T08:47:34.356518Z","times_seen":5048,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-Thwate.png?ver=1606790107","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-Thwate.png?ver=1606790107 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 848\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5fc5abdb-350\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:07 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUeDtvBeclLii1L9h0DnlnlBHvG9G7foh5AQhdubR6NrUKwQwNjQzPSQdyDaOX%2BOXB1hIoZNVEmUHgia9gSoU2VNCjczDvd5EOcxQE0SGUQTPj8SPUqqRh2lYp%2BVZZ04yFrEGXk%3D\"}]}\r\ncf-ray: 9ff934a56a7eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 32, 4-bit colormap, non-interlaced","md5":"73b08a84857de4b8bfd1628fa662874b","sha1":"9ee7975136b2e07d781db9cbf19dc7d4a54d54a3","sha256":"c0dcc312a05c7fb9a333fec868cec1652278db7aace30f239baf4227e27fd7dd","sha512":"f8d8249e6e1480ca35bf8929da5f74565fe1de31d139aa3e863c9ad0db0a4b6fe75ad0bb05c0d029a06ef0d238c1670ed37ad1ac69f6f46c40e419c546f362f5","ssdeep":"","tlshash":"b60196cde6e52311880ff0270730c61f5c05bc84b019da028101fb6a4eb410dc246b93","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-11T08:47:34.364992Z","times_seen":1760,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment-countdown.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/moment-countdown.min.js?ver=1663911608 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjtTpDVl1t8PMKRrXWu7W10cCgr2KE5pPmyMVxSIrs8%2BCTSfxVZiiqTZIxiL%2BoIvizusqE6Tedq%2BHkSYqK0tYbiCEMayYjzI2GGsXMlBHPRNAfNV%2FT46VeNOJZ%2F8KZ6zETwx0lU%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 23 Sep 2022 05:40:08 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"632d46b8-1d4\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a54a00b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (468), with no line terminators","md5":"0b855d61646fe5669c4dcbe0e9a9e4e3","sha1":"4673ccf3cf63a4b851618f6d298e865b01892654","sha256":"96abc335fe64b7dc248c1ebfcb5ca7f29f2a207c83f368c560426ead6f502aea","sha512":"4b4ece357cecba2d7ba1bed9cbc85180451ff64149ecf88f75dc85d41e244c9242ea0521e7069fac98787b04291d737fff0e31d7e3f0f7a64e80a94b565639d0","ssdeep":"","tlshash":"32f05cfc23f234a27dd96054369b9b8e18e7cb2188c48404e4d306fc1a7af0a1127d31","first_seen":"2025-05-06T13:23:13.662834Z","last_seen":"2026-07-19T11:09:23.439194Z","times_seen":29,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/en/liveinplay.gif?ver=1683086133","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/en/liveinplay.gif?ver=1683086133 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 620\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6451db35-26c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 May 2023 03:55:33 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lThLwE3q9AQydRQmJManq8%2BwfXPg%2FMnbP2ojVou6jdknSAPAUR6x80SEDFZVhV4tjrh7LJVinEGNlLDbjEjNsoC4ZTAWMCRJ9QHFDgpmH4Bztu34sdDPDqdT3RdSVIrAoCx41Cg%3D\"}]}\r\ncf-ray: 9ff934a55a59b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 23","md5":"7c5d7d1dadd0cf04ff184d3cc7bceb0a","sha1":"18a9f45930646cc269b8382fa2bcbfad76703a3a","sha256":"4612f5e2f5f34a0075fd97cdb9ea4d9a3cfd1d24749b9bc7a0aafb0e2ca2b960","sha512":"d166ab123258d07e09851a02cd1ab905cd95bddd4d32eba071a84a42b8a9785a5c6c861d9eee5c81d9351ab38c29e3c68456e4c5317effdf9b1206c6bd5e1fd6","ssdeep":"","tlshash":"1df0621bc80c845ba907ade8a98cdc875402e1f58e55e8279da0458cc68a5b2a3802aa","first_seen":"2023-06-29T20:11:15Z","last_seen":"2026-08-09T21:59:44.907823Z","times_seen":448,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/login_custom.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/custom/login_custom.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5fc5abd9-0\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZ%2FBmSLK2AtUqXmE0GV2hRqQ6KhnyaLfvC3UEFghUBunSDAZLb9EqnuDlawLLXOJ57sbpa3uT78VnsFzm3VyOXBRVpkv8u6244ESSUE8HbYGy5%2BkX42ZkUw6Ph%2Bu3tG2%2FtETh8M%3D\"}]}\r\ncf-ray: 9ff934a58af0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":778,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/common/storage/cms/cms_1166.webp?ver=1773130995","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /common/storage/cms/cms_1166.webp?ver=1773130995 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/webp\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"69afd4f3-bd70\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 10 Mar 2026 08:23:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 48496\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8q8yyvomuTuWzPZwgQZUmVH1rOU6wUjeY%2BXcdNiPnmI6mE%2FL8zY6Z7GSJuacsj4C88oAQy%2BlRsi0FcWPcf%2BI3rkxUD329OgwIACD1esK3umaqas%2BsFPq29innthPAnqEd0b3DI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934ba08b8b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x420, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2b6b14c154631fa085ad564a8420d6b2","sha1":"57b9a8ed2c639c655e4d389e8498855ec1cd881e","sha256":"d6da69ccc340736faf50cf5441ba64fa9495f32b14c68e32408d837dffab4962","sha512":"841e214be41fa4619a05655818338ed2722c98b8a37a63b8ed2bd8d6f3a347d9bb10b4bac7f9cc1d7741e0e79596d5c60f48004d7323ad2ffc970e6af95a393a","ssdeep":"768:bH0+EXFVe9xKnWYRE+tBpe0yIIE8VDfMQX9Yna139AhJd4ayxQK08ScOI1HS5:oNXPmuWgEeBpe0yIIEa7rXnl9AfWaO3q","tlshash":"e42302ebfbe4656a501b404240f70fb18e86fdbe5300de36815e9982912b5f5ab31e4f","first_seen":"2026-04-08T10:41:45.14762Z","last_seen":"2026-08-07T13:00:19.840571Z","times_seen":10,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=AF585D1AC74814F9\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=113209910\u0026si=947ea0365dd8ab01fc51bd9439b42930\u0026v=1.3.2\u0026lv=1\u0026sn=19170\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Ftaofangzhe.com%2F%23\u0026tt=bet365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:29.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=AF585D1AC74814F9\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=1024\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=113209910\u0026si=947ea0365dd8ab01fc51bd9439b42930\u0026v=1.3.2\u0026lv=1\u0026sn=19170\u0026r=0\u0026ww=1280\u0026u=https%3A%2F%2Ftaofangzhe.com%2F%23\u0026tt=bet365%E8%8B%B1%E5%9B%BD%E4%B8%8A%E5%B8%82%E5%AE%98%E7%BD%91 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Fri, 22 May 2026 04:51:29 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=3845FA0777255A42; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-12T06:26:47.775377Z","times_seen":376633,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/animate.css?ver=1776393335","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/animate.css?ver=1776393335 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"69e19c77-12fc4\"\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oltm53nJFDdqBQBrkemqSAEclujY7xAz%2FBVW9QniliBF%2FPZkYdPbzxp9%2B%2B7jXITvdl7KWF%2B9mOcDiAxkj%2FkWTTS95zSQczORHWNwJmgenYoed81Kq8HVdYwWTYwJo9%2Bq%2F6QWgTo%3D\"}]}\r\ncf-ray: 9ff934a5298eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d77152dfdebb91ffa5108efb8421b43e","sha1":"220f973db66efd53eb0fcf2d3a7da7a9b9281642","sha256":"fce0a5fd68a0a23d2cb433580948f1bd5344dbdb1aab2b19ddd8c34f39a427d6","sha512":"be311d8d2a9e31b197e45b91877c4425816605229f502ae58ceb3e912ff3b3fdba2f48d06c482f5efec6e93f1fd319062e395042249920951a5736509d22fbf7","ssdeep":"384:BHNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceo:JNuKuWg9unuLuJu9KIZQMcLceo","tlshash":"1c732fad2991108456638a1d83df5e68273ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2026-05-10T19:50:54.229955Z","last_seen":"2026-07-19T11:09:23.477569Z","times_seen":22,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1779425483","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1779425483 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"688097f7-71b3\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zP%2FCz7CiI8DFPV3CDltCTy34XDn3IeU1pvT5platXcpYHnXlmJGDajOtYaiGmOeCTy10EsRkYpvCdtLsQRTWGuTJ8IykEZ1Smhx7S37p0WD%2Bx40Asskj0ocPJx6d8j5TCcwlhs8%3D\"}]}\r\ncf-ray: 9ff934a52999b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28900)","md5":"31bacfe1d010712cb3837aec4ec1e237","sha1":"3c28b0f6e91fa137ab67c8370f11f60a63d87d02","sha256":"4f0bbfaec56962e62f55bef603cc25d0f56cabce57471131b21f4e9438066baa","sha512":"29c73d08840e5e21c677748c0aa88ee7900968602af5cbb5c6f6bf801c765b64562f4401a49f041aad7e229461be70db9a5a74317bbff479724547013a0d19cc","ssdeep":"384:Qu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:blr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"73d250e8e54c01d66731c48bff81b36862baf73dd5844d99f01f690c29d22a522c5fba","first_seen":"2025-07-24T08:18:25.967403Z","last_seen":"2026-08-11T08:47:34.33757Z","times_seen":2889,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/en/footer_tindex.png?ver=1678854633","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/en/footer_tindex.png?ver=1678854633 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 21119\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"641149e9-527f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Mar 2023 04:30:33 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9W70BMLJyqlkKFMHmvjs9SNjZRSI0Ihh0QP7hU0v5LilpIc8gGZ8ZqxT9lWi8j%2BbNWcGJfkCtkf6YwThWDvTvmFe%2Bk4ZFdIrTMtffYK6M2C%2Br%2FccKp3XiUbKiAQEor7%2BCYdDhp8%3D\"}]}\r\ncf-ray: 9ff934a56a6cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 850 x 332, 8-bit/color RGBA, non-interlaced","md5":"32a87d100a3aa2d4529ebad28b40aed8","sha1":"7c5c6a4be7545d35bc980c8379534675fe048adb","sha256":"8e0cf84fcd5823a3bda3b510c142df920292590b54461741caef6c702167d09e","sha512":"525456de55577fc25f7434164ccd72138beea8f85951809b523e0d3609a166e1ea7dd72d3db346470813dd63942cd40158b2f09faca610e391d2e091e9e6a417","ssdeep":"384:O+sdVk/P/pDXtoWmRaSn4tmB9I4FQCCh66Yv0x5kOObu:O5du/n4WoRI4FVCh5PObu","tlshash":"9892d13bbc870962c76245fe5d211e001f7949ea0446aa1d1b6f9c4fe836d1c68193f7","first_seen":"2023-06-29T20:11:15Z","last_seen":"2026-08-09T21:59:44.927474Z","times_seen":448,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-18plus.png?ver=1606790107","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-18plus.png?ver=1606790107 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 441\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"5fc5abdb-1b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:07 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dW%2BoEMk5AUv0el8HPZTbD%2BhIt0PWGzGk7Xo4XT0gDivh2%2Bc36BCRqQE8Za7CfNdtIrFvNMnIOow9x6jWsDv25aTSev66s2GfXrRSGwy0zWWi1GPT1YNKXseHWBZ7%2BrASsbLX%2Fnw%3D\"}]}\r\ncf-ray: 9ff934a56a87b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 4-bit colormap, non-interlaced","md5":"950ceac8f20ad504e908c855fef89833","sha1":"694bdd9709a9bb3be26c6f7bb350205eb44ac7b3","sha256":"e17939202163e612402dbf251414bbb4e5faffdd133fdccd0bf2afd356e0d635","sha512":"07ef639d2d340fe07a2c32c06d67548675b57884e9c89e508cd1abce17dafa0e33bdff120c5c6f41e7fbb9d68f32908e859ed01b0d6f27a1fdb28b040749d289","ssdeep":"","tlshash":"f1f023d3874e9c50f4505f61c66f1a8398b68e0cd0afe906d91073bc283a724b2d36c3","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-11T08:47:34.343839Z","times_seen":5052,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/js/www/login.js?ver=1606790076","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /js/www/login.js?ver=1606790076 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kyzDZM0GsraNqaCX0IXph9H3HJgFs6T%2FFmxDsv5s3G8uDdG8hdINLWXtPuxxTBkmkxjrT9rWxPQ3oRqnx0trQvjNRB2AOPSCFIvc8l5cxGTcHAQSqvJ3J845SH6G4pymwKl6Ybo%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:34:36 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abbc-bf\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a57ac7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"24bc8669caf172f2c17a06fcd73ae539","sha1":"3bad8f340bca43d8fb98c3ca39def12f816769a8","sha256":"29df48677fd1c2b2a602c35faeadd3693f083b78550b2c0f3108f356c34b74bd","sha512":"0b4b2dc35f8b97238079334be832751d1e33dfbbddda4961c38127afadcb088101bad71b0442bd810930df2658dfd9f42da0b08d44bb1e1f1dd0a5dde33423a3","ssdeep":"","tlshash":"f3c02240b13f377c587372a0803a0506df73701c1c0056e0b0b842a02c187040813c78","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.36854Z","times_seen":5064,"resource_available":true,"data":null}},"time_used":786,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images/dc_new.webp?ver=1774418058","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images/dc_new.webp?ver=1774418058 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/webp\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"69c3788a-2a8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:54:18 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 680\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrDDK8286mB0BilRLsrNYMVMhsfFeCtUFFSDwlmV8YweFG6EhvgrAcCD1D1IhhtFUL%2FbHVDpArAyRzmIMK6D8miE5JHVLXH19lP5hAxCCa3kerCLjDJlUkKJzJ%2BNE2BvIVEZW%2Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b8a8aeb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f06b671b24b39dd51812a3d90e7e632b","sha1":"74cf3af220d3662fa71853a31128db97699a70c8","sha256":"c6e2ee2c77bc6faf0510f019c8d7d3c0540c64afbd8251bb4f3aa0c3fcd37fe8","sha512":"5ede7ad2295703853ac2604a2ced564a1d6c43cae90481f1ad2d912eebab2f918985785e6746c8d0597ad123df2ceddadab1a0477d6ef3ea2c3da49839c78d27","ssdeep":"","tlshash":"ba01832ad658dbecdd5a957a8b0e2004398ab07317f38740803e6a8848e0f46e193391","first_seen":"2026-04-08T10:41:45.18626Z","last_seen":"2026-08-11T08:47:34.324291Z","times_seen":64,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/common/index.css?ver=1700473959","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/common/index.css?ver=1700473959 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 2034\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 6749\r\netag: \"655b2c67-1a5d\"\r\nlast-modified: Mon, 20 Nov 2023 09:52:39 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0G5kCa3jqIKvqhpdzgO4Fo5Zv0fLhhQmmQ7WQ5%2FBj8PaMQv0y6O3iMaLky668xIdsn7GPhy%2BH4xm%2FtGm5OB6s1TzFEVkM8n%2B21I3Tq1S8G3yHTYqgjr%2B0eCaiIRNa%2FgtWfrnNk%3D\"}]}\r\ncf-ray: 9ff934a549f1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6749,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"36cddbaa5fc22b34569e586d5b490a40","sha1":"7a1bb6107bfb0a4a639a8f637c41c27072dded9d","sha256":"6e562f1db87db3942a4ea412668b88caf2aeec264a7a2c1f90a5f9f12e2de048","sha512":"c25e66c6d0ad76c31a2d0055850f888dd4010ef2192b4386dca97ed256c5a9685a07ef678b0b732df9755bc2b81c0fce13e12b932029be77df7884a8143591f0","ssdeep":"192:ucRgCwKuipoNim7FT84K7CbybatUxT9NLq6:XF4ipcn7FTK+udLq6","tlshash":"7ad121ba5bb70e42771282f5ab7e6b815329e003910ee56c7fe4725ccfc52d495b2388","first_seen":"2023-11-22T05:50:53Z","last_seen":"2026-08-09T21:59:44.900132Z","times_seen":271,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":59,"dns":4,"connect":7,"send":0,"wait":839,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner1.webp?ver=1774418209","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner1.webp?ver=1774418209 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29426\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37921-72f2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:49 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cn3%2FFBeNawtV061DA0fv6nrjtuFoyvjSfZ4KNjUhQiMrPdXAn9aTI938Y1MeBAOk14sOCZNAM%2B5wulcSnzzHDFbAvo5GRjvfYNx2zC3aBjm%2Fu954njdBVXuliUg2qx3PSa91q5k%3D\"}]}\r\ncf-ray: 9ff934a55a23b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"99cf8a0778ac6a6e785f283b481fce25","sha1":"a9543e3c2feaf148821900e557ccb1af5c50253b","sha256":"02cb84a48b7e38e2dd7b25c4f3ee4d57b1231cc8501b8f7657ac10cf364da064","sha512":"5ce22bfebc0a8fa316d3b52fcb56b2d1df1f50a2685e03441f5d3c5c66d03fb08165994ffbf0f96aff2eb09642a005ddbdc76738aa5feecac89c32083e5921b5","ssdeep":"768:P0P16BfhwPOLAhVCbDgDtF26H/Wrf4hY5Eawxd/7yGSuT3eM:PXh2OkrD26HifTidz1rSM","tlshash":"4dd2e0db8ea623b515ef9e9c04d2c64052c9d79939dd038de2581209dbecaa94783f3c","first_seen":"2026-04-08T10:41:45.136772Z","last_seen":"2026-08-11T08:47:34.290378Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-gt.webp?ver=1774418177","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-gt.webp?ver=1774418177 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 310\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37901-136\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:17 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2cnsCeMNMNCC94TG1RQBmtaGhoXwAfN7cIMA2Y9d4cWplPHkH2EZyXGuNjBleomN0wgFq0yMBr9H4YtypKgvF10iFpBUFsz1xKWlol%2Fqk4axblVxav9APVBiGp7IaEcTyhFhSw%3D\"}]}\r\ncf-ray: 9ff934a56a7bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"465584f73773f68d0760b29326b4a2b0","sha1":"5182e2ebe58a6932035a7644cca38abee29401bd","sha256":"06f674025a749f04231965b74b634acc85d4f835beb52917649a75a46ff88161","sha512":"ea4d5e4ab9f94fb3a6abb06be670a9540eb1653fd9c235853403498a2a016fec1f43d4151e0547c7587887ee9aa24750eb19d56e4b24e0425d3458a475ef379f","ssdeep":"","tlshash":"07e07d51c2520901efee6cb9631a95e155c782875957882774f105a411a84565141b78","first_seen":"2026-04-08T10:41:45.200711Z","last_seen":"2026-08-11T08:47:34.348191Z","times_seen":64,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/moment.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Msec88379kXb5izYkQ4g6WRYqTbA%2FyRAmYCrL5yxkLwcab2Q4g8ZNG23hCUNsjmIpY%2FMoC09ytzt9CvAsqWYc0D8ayl56j6JCvWjomOH1Tfsu%2BWUyo2CO0gGTo7xNRms0rhN1V8%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-24db2\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a549dfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150962,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"928f93d12cf250ca4e0139c38fdf7f33","sha1":"e4b6c150b229c0f12b355fc2fb10460010e4ece5","sha256":"fa1d88b3f7e313ca24d861dbbf0b0c7b4c8e2bfef04f3443ae98bb7aa426e0d5","sha512":"4f2f423a0f9522515d3bbb719cbbea6263e4a7ecbbbab5f47b71a2f71d73acdf80667fa63fe1ce516e5d8844ea03e9ea604d4311a240fbcccadf4bfed30da890","ssdeep":"1536:IOpSD1Cb6yVBXfW1vCUUdQQTj06HPU3qQFSNF1T7GbF/nlzUIKnCIioTYnv2BcY:IOpSDJucXUdQQSu1T7GbF/nlz3ga2Bp","tlshash":"00e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-29T23:01:19Z","last_seen":"2026-07-26T14:48:45.50749Z","times_seen":92,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/en/204x30-live-streaming-02.gif?ver=1683086141","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/en/204x30-live-streaming-02.gif?ver=1683086141 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 427\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6451db3d-1ab\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 03 May 2023 03:55:41 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JORIgZawQUI%2BoM9fTCnUZ7cbGPbUxZT6TqZhWZHTO2aXTgLQt3eSVd%2FXiL6iqY031ADyDx5dlorHRXqa8xfvJvyV2EJr1CGUYU8SpPmT181UWof0U33cNJWyF52AxojAswoJEnc%3D\"}]}\r\ncf-ray: 9ff934a55a5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 204 x 23","md5":"91a7a64bc6d0f0c949765742fd7cba4a","sha1":"5ee79f81d97aa29162a5cbb8939a9f8109c821a1","sha256":"a0fc8d019b9c5116c35b5a3ed7221814a8ebd3c8ce5e2063333305b48413a06d","sha512":"48337df1e9e7483bd7a0620f0da1c3353ab634c46e11d30bf1cb4b654eb131b91e8b7214dd4c569844aaa81cc8600218115371adb826fb7e86c6d58af1ae01ab","ssdeep":"","tlshash":"c9e0f126c853c14eeea67c30f48d45807b9b57d8d133f461412303482512932e00214b","first_seen":"2023-06-29T20:11:15Z","last_seen":"2026-08-09T21:59:44.91393Z","times_seen":448,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/assets/js/caller.js?ver=1675418257","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /assets/js/caller.js?ver=1675418257 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcoRii0M0hTBYnylsarRjLPke%2BTlbDPSY%2FmDRXdekvxGNoOcHi1CQhh6e%2B1Amedv%2FkNzFd7J6Jf%2FnV7fvZLEqbkD055fOIs7gLULLFsAIIV5hmccO6D8qoPqBK5Y8fXpfkPbJiU%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Feb 2023 09:57:37 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"63dcda91-1122\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a58ae7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4386,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4e7441dc033395b76a96b25b6efef0f0","sha1":"c833e33f4a95efa559a847dfff036cb904260b48","sha256":"80caabbe50f5f83254e2545d01bacf299c7f417a103e912bd41d6c330a6e4f86","sha512":"e96041ac2b7106fe9aceddc1faa3e996ffaa97945d56cff7b3ca0697492cf6ff53f6fc3826319a85eb360e684a166c0c8c075118a37655312dfbf231ff9aa167","ssdeep":"96:veR5suijTWxKhgCBTSCkAjnhefPMm03OMu9eqeeV0vMu9eqeeVqgYi:veR5su+TWsU1eO70v76i","tlshash":"dc914212de042051f76332b85a55661f6131684f7f8a888dbcbc747f9b70acb857d189","first_seen":"2023-03-13T18:11:33Z","last_seen":"2026-08-11T08:47:34.303198Z","times_seen":5059,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":753,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1779425483","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/unite/login_modal_unite.css?ver=1738950076?v=1779425483 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 2001\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 6984\r\netag: \"67a645bc-1b48\"\r\nlast-modified: Fri, 07 Feb 2025 17:41:16 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVD3qHnNCetwQpSfLhMZSxG8Wuy%2FgC0DIWnrYyljl%2B6LMQTqu4N66nfaZx2JxVb%2BNRYdDHa%2BIgtFGhzGBQCToJ%2BX6VYuHA2pG%2F0EqLOmHGm7z24UblBgGMYdKpbr21lIa17LP%2Bk%3D\"}]}\r\ncf-ray: 9ff934a5299bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"252c2fa58e6d682ca2b18b0888ebf910","sha1":"511ef6db164e0c745e67941cdb2043aef965dd0e","sha256":"5bca12ef0f6bfba5c12cbdd0eaeeb1d48e05c91149df7743b76b80480317306a","sha512":"1aa311c2f06a767d9eeec9c384f806d2b19977bda91af36a6aff9443896e677a3e488974b64c0e7c3e6a07cf77c834e6d115a8388b5938f065c5cbeff224c7d7","ssdeep":"192:4ybbQhWJZ4JWpC/+FtCmSCgIUaTgIaxl+F5Dm9qE:tFYd4F5Dm9qE","tlshash":"9de11e0576bf0a63a06e860935ea9b80630f9217c615ef7f7df132448fcd6689139f64","first_seen":"2025-04-11T10:47:55.703801Z","last_seen":"2026-08-11T08:47:34.300409Z","times_seen":4315,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/main/logo.gif?ver=1612840274","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/main/logo.gif?ver=1612840274 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/gif\r\ncontent-length: 18406\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"6021fd52-47e6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 09 Feb 2021 03:11:14 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXbi6MW8Hc5hRSgiPMLN1WAYgs76a9a%2FOQriZMWvvRppyqY7KxX%2BbdiwT8MNRdppROVlpuJkynsvO9kyWd8VNuFgPCS95zIauUOZcrnp60NuoQYkuIU9uDn9Rk%2FOqWE%2FjVjkXYo%3D\"}]}\r\ncf-ray: 9ff934a54a1bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 224 x 91","md5":"e421930a8a259a84e6c345e5a139c696","sha1":"ef5a4b7d2ced985d3e23108030394c34e737a051","sha256":"84b7dede23dab781ab48ef1101245d9dd11e8d3bd9bc74b730a37d3031819f69","sha512":"d3278e15647c80a89a53cf97682ad94dbdb44b3aa28327b53c80280e6e09f83d21ba6d4b7948c8feb37d3e467da1f3c518be73921dc5b82d96a840b1c9b8f0f0","ssdeep":"384:XbZPuG48/hDaZaDY76y8MLtbOYh5m/hDaZaD3MLtbOYhA:1GSdaZX76yPtSYhWdaZNtSYhA","tlshash":"c8829d8c416a68ead614fbba7e36aa27a8314073bdd00d33d455bbddbb4554ec0982e0","first_seen":"2023-05-02T11:06:58Z","last_seen":"2026-08-11T08:47:34.309693Z","times_seen":1761,"resource_available":false,"data":null}},"time_used":1083,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-22T04:51:22.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; expires=Fri, 22-May-2026 06:51:24 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D; expires=Fri, 22-May-2026 06:51:24 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nExpires: Fri, 22 May 2026 16:51:24 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: BYPASS, MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147568,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"36b16c01612101e31d570fc7e9c1ead6","sha1":"1ad514b7c94cb1331721f6a7661a110bb30f0b54","sha256":"f08dd053e57344b2079aab3491a4ccb24a03a2f42f0d5a52f0381e597377eff7","sha512":"7f3713fa1795b46ce4b4965c08c98830bfa9e985a5d6aca71ed57fa267a9be0451d4a0112a12e96d37b9a6acb9df68fa4fc0312b785e57ad778539732b9b320d","ssdeep":"3072:9AGkFbIf4grvTKFCHZ85uVSq5ORbHCFwXt+wkeEqdCNRtRmt:9AG+qbvOC34Wt0t+7dqOct","tlshash":"0de3125bb5cac96580cdd6a289580f4b1e78065e4a4b5af684edc0ebf1c7f4cccea811","first_seen":"2026-05-22T04:51:59.651601Z","last_seen":"2026-05-22T04:51:59.651601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2507,"timings":{"blocked":575,"dns":26,"connect":175,"send":0,"wait":831,"receive":526,"ssl":371},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/encforms.js?ver=1761119297","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/encforms.js?ver=1761119297 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1L7x7BWTuDV3a%2BBWU3uFtjF33%2BhVwweroF5eGEmlT1hEFvxhTZTcSs4WBDI%2FjEzLCTNpOR%2FoZwSfy2pPcgJ63e4khCBThLDA3BW7yduYsmOvb%2BSOSI7CpD7DUu18ZWQeaj%2FILw%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 22 Oct 2025 07:48:17 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68f88c41-2e52\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a58ad9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d2d77387c0dedc78ae85a7ab52aad886","sha1":"0d8ee19645e8246409f76adee4412ecef3466b76","sha256":"2af6b51b39ceab86129d473a1fb9a4a827539efc7452de2103a84ebd09d75790","sha512":"d922ced4a418ef9049cebadaf49f897432449ad051ece1361014ca9c64514f9eb53f6d77d6e83551ed2939d0eab9d518f0c048e12aef3e167ef3d1d517dbe3ca","ssdeep":"192:gxlzcp1ISvp1S/yakFAn1hQu66H1Ka1t4l/O3a6Nr:zb6cu6IQM","tlshash":"9f32209871bb1870993338344bbf8512793ac11f4c5cd954bdac2aa07f58a5ec6e1bb4","first_seen":"2025-10-22T08:39:12.013749Z","last_seen":"2026-08-11T08:47:34.327658Z","times_seen":1511,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/common/bet365_style.css?ver=1684314915","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/common/bet365_style.css?ver=1684314915 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"64649b23-3e1e\"\r\nlast-modified: Wed, 17 May 2023 09:15:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EkKukpKGD9ZPm7w2uVWRM8eF7ppLvavxWMI2ii1sihW3N213XosTNnEVEQ1fJmqbruTqC7GtBd%2BtWJoIVxndjXs6CURzqSL9YMZ9vuD9U6srUzoWuQwIk2Zx6uBht%2BCezOYdv%2BE%3D\"}]}\r\ncf-ray: 9ff934a52988b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15902,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"9bf3f4deb16067cada0553a9bb27961e","sha1":"8ebb987ff59a9221f94461b683194762346e4f3e","sha256":"fb976282c32d1499bc3cc913048d8579256daed67b4c49b62813d6fa4c1e2509","sha512":"509adadca68c60a04b50e412fbef95b3c274675b52563836ef437c8e1bcdab0d69f07812f64a524c649456759ae0a8894c1d9454082a96d74f83b53f66e6a944","ssdeep":"192:ksOutVaRFgGntC76JlL/mt8ZM2Qpdr/0CCsafFU/Hja1fgHFK4PNlQVOwGuNOQ1t:0F3LmaFUm4FK5xdEq","tlshash":"526252b69b672c49b516c199af69e7c123695213c00dc93d7fd8721ccfce5e498e2388","first_seen":"2025-04-30T10:38:17.66873Z","last_seen":"2026-08-11T08:47:34.277464Z","times_seen":1424,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":60,"dns":11,"connect":5,"send":0,"wait":869,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner7.webp?ver=1774418209","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner7.webp?ver=1774418209 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24394\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37921-5f4a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:49 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVxFzYi0Zffaxb35CQoN8wYtywOGgzgY4KmNN%2FahP6SIphkATZsKxuzKMdkPOdgQrQNIDThx61cNt46TnhYWZUXJMfiCWV%2Ffdrd2SF8hvJvCQ4T4d87SxBvO%2Byah%2BRLG49REbGQ%3D\"}]}\r\ncf-ray: 9ff934a55a44b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dad07d87014418ec6554f38d826d54fe","sha1":"dfd24646d3aee30d7bbbcd9fbdc70fa64f6e6871","sha256":"339fda1fd0ebe2de4c07ddb7ee2d6701cfd9c2e15efc5e84a1f2fee3f5a0be64","sha512":"dfeb2c8ce07a85a4dadbaea68aaecc51b894a5b172255a54ede857ae53b8f7db0fed874312fc0b8e37435fd87093cdb958699a85a73ef34c9fd89be29c7dfb59","ssdeep":"384:zNPaTvkJTBM/Tn4Wg64NKiGZxe0170YrK160zM404ClVM6tOhcRU1dWqVMegHLgl:hi8J1ML4w4IiGPeRMtNDMjhcSjFVFnvd","tlshash":"35b2e12aad037009e1444077d0e51deecac47ecb4c0eed428edad6bf46d5d5261af45d","first_seen":"2026-04-08T10:41:45.183483Z","last_seen":"2026-08-11T08:47:34.359952Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plugins/jquery-ui/jquery-ui.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plugins/jquery-ui/jquery-ui.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJmqQtOeIRx9r%2FfIdmcGbOnDh8%2BASBb1Fk37dx%2FsqbkQWxGLGtC%2F%2FILEzpSgURu6LrJR4oe92J1z1Ejl2nOZXnRpBz%2B4boC7FXSkQtPlwVtDYbdpWmP3rLpeEtgsDjBHjkuxK%2FI%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-3dee5\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a55a52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T07:05:19.383595Z","times_seen":23065,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-logo.webp?ver=1774418177","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-logo.webp?ver=1774418177 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 586\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37901-24a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:17 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W175hmHHWmvacO9u4M5mXe1YQdTF4LFrKGAruA1VTTJ6CxnXoC1UGSHSWE%2BDX76MDJlbaQknNDvYXgXBZEr%2B%2BjJ%2B7ZVtaAzDbx5i4UG0UoRc2Jz%2F4ODR58OiQ97tZgmbReTN0vk%3D\"}]}\r\ncf-ray: 9ff934a56a79b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca961cbdb433105d1f8e77d1c7f9fbd2","sha1":"c814d504939f1278b106262be56096e1182b4754","sha256":"8e28462ad4bb87f3f0d5150b2ed1a3e6e4b1b29c1e27520888dcf80a1e5e86ad","sha512":"c0ebc1469e71e1ca07c914172528ddd9b979b35288dc2f5ec414d97ffa2aa8e17edf90e82f7228b79060b5a38d79f3b797a69e74056be93dd6257eae6a7d4d65","ssdeep":"","tlshash":"6bf00c1ca3a5282199cc9daf7a2024795c076d61db962e04047241a7312a54e766a6ff","first_seen":"2026-04-08T10:41:45.181998Z","last_seen":"2026-08-11T08:47:34.269701Z","times_seen":64,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/2026fifaWC_stickyBG.png?v1","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/2026fifaWC_stickyBG.png?v1 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"69e19c77-11c6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 72815\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgHAG76bpFDCmMTgC7f%2FHQ6WT%2B5WlcM2v1BnllzUBDCoMgVpljP2M3I%2Fevs4lt88KGJMm0k72vXb5kt4Yfn1Ji4yABwA0b0%2B%2BC%2FbcQ4050nKIDPwcGAjp08qR60uGNot%2B1K69w4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b7b8abb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1346 x 419, 8-bit/color RGBA, non-interlaced","md5":"383f5b7b42b1c0262111d03dc6674589","sha1":"e888db2cfa9f90c1ece24611313a7daa316fd581","sha256":"d66c2a8fd43775968cfab86acd57b1b3cd9afa29097dc7bcab35faae39475a36","sha512":"5a3fe008dc5122aefbc22ff11b857199c74f8f02ac4246d3ee94868995f2664687e8f7682381cca4533069c829b94d356f56cff43819aef8189f728ca81a82a7","ssdeep":"1536:AuSBcL5CopgOBfulXcuHDV8zWZig0i6GQVI6ITWv7mv/1cHUmuXTpatcz:5SCrNBScuj0rxO3n1QYXTpH","tlshash":"fb6302cd315cb1989852a40fe5804b88f4e51eaf52f587fb870cf3fb5b7aa928045276","first_seen":"2026-05-10T19:50:54.228017Z","last_seen":"2026-07-19T11:09:23.457215Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":432,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/unite/prizedraw_pop_unite.css?ver=1776758732","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/unite/prizedraw_pop_unite.css?ver=1776758732 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 1773\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 7367\r\netag: \"69e72fcc-1cc7\"\r\nlast-modified: Tue, 21 Apr 2026 08:05:32 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGB8l5RlWZjbi4k3hHAQXZRZMp%2BGMmpGcmuvlX7bOB%2BtF8Am4hGhWis1T13KSlbbuBT7hmDSr2dTnogRqlkkw08XubOQyrPB14h2ZVBFrrlgrp4wKg2xIFCldLVk59pVt62MfAY%3D\"}]}\r\ncf-ray: 9ff934a5298ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7367,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"3e122aeec2f331f838ac02196911c053","sha1":"36529cf5fcaf899aca56186cad0cc4b6a1f4be9d","sha256":"33b86def05863e32da07888eae98f8839c924576cdfb89484366f251e1d651d0","sha512":"527f177b2f2f32f83249bc2da169eddb3b00461fb615cb3880a54daea2e2b27e00efbd86ae6b8a4a5c20afa1201eea10f9c8ec385603db1dfa6dbc0d6cbeeebb","ssdeep":"96:jIjyND5elhmYza9/4O8nn0LDqsEx6hhIArcBlCWhXW5bQMqYsxhe0CKFwftVo:zMfeun0LDqlx6hfcBkW5WN3IhsKFwftK","tlshash":"87e1f3f4e28f3ccd77b797e96eeb0d52a50a02dbe202ce04a3585ce55f5a13c2536284","first_seen":"2026-05-02T03:51:45.646189Z","last_seen":"2026-08-11T08:47:34.325268Z","times_seen":62,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/CAN.png?v3","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/CAN.png?v3 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 159789\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69e19c77-2702d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nn0zAdL0UndSR2T1VzNKsgiOjkeXfBtLc3zrgQbv1tf4AYlLvBr4FZtmKpoZAJXU3pTIx2guvy8eGNKz7tfuT6tCi40nWXHGjm5tBO6p616itb88U%2B1fwpeZ5L9gFOL3%2Ff5%2BuOM%3D\"}]}\r\ncf-ray: 9ff934a539cab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 341 x 447, 8-bit/color RGBA, non-interlaced","md5":"10c30a7f30bb8e86cfef942dcdfdd7a2","sha1":"a379c2fd0138360c8b69ff5bc73a5f6e26079d1b","sha256":"cab02fd5033ff75bad4ceee7f02480f082f32f45229489e0a546a84cfda3d208","sha512":"098a7d2c5bd333147f05b9de61dbf25bb0e926e580c326857bec572d7492ab2271ad71726585564cba0d801e3970dc1b52a4fd215e6419b40a8fe3dae1880b15","ssdeep":"3072:ez6Om0cB7+Q+KMoPpGU6RWoCslJwZDgV3LKKwelhjC5F6kaNj:y6OdcQ5oPpGUeWoCs8DQvlhjK8jNj","tlshash":"6df31247f748e8f7843afc6225c312d097a3bbc849b8d8257724b86d64b60b5eca153d","first_seen":"2026-05-10T19:50:54.198368Z","last_seen":"2026-07-19T11:09:23.495249Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":670,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/other/banner4.webp?ver=1774418210","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/other/banner4.webp?ver=1774418210 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35256\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37922-89b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:50 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1d3XfnHTYrENsYMWaSeG9z%2FGRXtAdRTGkYJyG1htBg1Q%2BzNfiYsUKurpKEBUon3XjjYrkXtP4cvpeyxtsEBnVTKnuEl5T0UhEzuGWUCw43nNA8EhKG4Fini9dcifUFAjEWmAFQ%3D\"}]}\r\ncf-ray: 9ff934a55a2cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fb04f9d327cbe8fd4a558c56f4f065c","sha1":"b29bdd1705cb2f7acd1d61226c5637f8ad118184","sha256":"57fba3dc42207bc23519c489ffcc0df17b1ba26f62c8b6e7295f451550e32ee6","sha512":"4385a2f375ef9263b371688cce28165d3a343042aca61283d0509bbca378814f68cb64ef1b34b9e83a85c22ebdbdd73184e25930139457008b1f537b009f0d0c","ssdeep":"768:FFnPZg5MwYXm2LR6hEGMKse+trgkNmoL2MMzldGu+JgucOttd:fZgzYXm2LR6hEGhhkooaBMX/ptv","tlshash":"9bf2f1ae9138fceefccd76685b5010419ca23283d255572796858f778efade432848e1","first_seen":"2026-04-08T10:41:45.138416Z","last_seen":"2026-08-11T08:47:34.369872Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1079,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plugins/jquery-ui/jquery-ui.min.css?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plugins/jquery-ui/jquery-ui.min.css?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5fc5abd9-7d4c\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksna6xN2%2BivBTtVBiicUSh1NwPvhDvO9Up5x1ffAUO4yYmkM10rz%2FinCcixv2CGDe%2BlzRSOwhTlco%2FllFdnwFAtuj1r32%2BglcpcTTcYDH4YSVBvolzZKwTc9%2B0rfCHlpX0QsaU4%3D\"}]}\r\ncf-ray: 9ff934a55a49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137)","md5":"0b5729a931d113be34b6fac13bcf5b29","sha1":"88ba90d2d2944315afd28a706ee5715ed980c634","sha256":"ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29","sha512":"68e1b473a9cf3731a4fb9ce3c3225aa1152009d3ab7d20e198c203daee3e388b25af41a3a4b2a8ed79b4028df19a93384fc026228b9192ac23d67add56c2ca11","ssdeep":"384:pCwiEt7lcR8lOXHc11evBMzymUh+4C6G/zDcSc7nfZBhVi:slEtiXHcEBMznURC6G/zD8BhA","tlshash":"ade25330a5c2242dfe33c23060e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-03-10T04:06:13Z","last_seen":"2026-08-12T00:15:29.320793Z","times_seen":11962,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/footer/footer-GamCare.webp?ver=1774418177","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/footer/footer-GamCare.webp?ver=1774418177 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 384\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37901-180\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:56:17 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUZvTjRodApvhv9v2auTtTjK8I%2BCd%2BQuYfLyCebejU6bpHi9grgYAVZfgeJi%2F%2B6WBYNbnDHoUHKZqI%2FL%2BQbDx7U9hDyIQmwqrjPmyGQbAZStV2ZQ8xJqnngd2xlicyqSClctNm0%3D\"}]}\r\ncf-ray: 9ff934a56a83b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e31e6a2a0bebf1e66df11cf355fef083","sha1":"00a4902adb5652c90335baa8835b7f1735b3151d","sha256":"24fcd293c2bf44a462fa049d1a42384330e3605f3ef515fb9f2f2d8b03ecca49","sha512":"a1a3cfb6e4ae0915b85113082ea96ebbaeed36ba737a96220eeead52905935e01b0ea7019eb8f6e21d109a00a2ddb78af7476c95ec87ac0edffa30169857e245","ssdeep":"","tlshash":"d5e0f8641200dec2c0d9002ba23fe3a367424bc0aa034e20c7428622437ac7c22a6cbc","first_seen":"2026-04-08T10:41:45.167404Z","last_seen":"2026-08-11T08:47:34.335143Z","times_seen":42,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/jquery-ui.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/js/jquery-ui.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARt5M%2FWOzAvIMbeSG4I7vTwKWF0KTzn18dPFxO6SZbOOSi0kDRlmuSan2onr08v360bYxts9mJaYB4HHwxYi6eyeRqrEIFowwACYk4WzvCjasSLRnYKqOEK304zNur8O0anL3GQ%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-3dee5\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a56a9bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T07:05:19.383595Z","times_seen":23065,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/css/e20260331_FIFA2026.css?ver=1776739135 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 3547\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"69e6e33f-34f4\"\r\nlast-modified: Tue, 21 Apr 2026 02:38:55 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtnjsooMOctjQDR5NUTVAp9rmvQtlhfbEQ1SGyT6hV42t1rVTr548GeeN9VQI8Knm%2FxiP2uKW%2BT%2FLfqTCgK92EYAgK7upOuvQnIT5wXlKqh2ergiRwJ2llAAs6tjsGcDlkxagK0%3D\"}]}\r\ncf-ray: 9ff934a5298fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13556,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"41933e03d2cfdc580cd408c2167dbf5c","sha1":"5e729cd64870161830ce284ffe59d1989264d866","sha256":"75eb3909d536d505095096ad39d90dcb86f000b1f122899fc20f75f03e480946","sha512":"11cd5612a1ce2097887d0bc1ee6b68bd366532fc23be61bcb45d98f3572bb118dc30fde70f7e8e90daff76ce3d5c68547325bd9c4894013382bd17fbe965590c","ssdeep":"192:CojbaC4Jy/Sfel+MOFrs8gTCx5rj3PovpXRwXDd2xpPAHIcV8K0z/UPnqmiywLsQ:wGrOFrZEBOD4MaonDPDPDXDkh9","tlshash":"bb52214635af18486a17f07c2feb471c623c8063860aac6c76ee684dcfcb99c52937c5","first_seen":"2026-05-10T19:50:54.215971Z","last_seen":"2026-06-08T00:40:31.455059Z","times_seen":12,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/gdcode_1779425483","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /gdcode_1779425483 HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1081\r\nConnection: keep-alive\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nExpires: Fri, 22 May 2026 16:51:26 GMT\r\nPragma: no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Im1BN3NXR1RBUXNHbEMyNVZWWFFpK3c9PSIsInZhbHVlIjoibVQ1cktIUWV2cHlpdElzc1ljTTVCQ0VYR2orc0lXSXBoVFVPUWRHbEZkK3JQRHozeDhyaXZSVzFieUpUWENuazJLZGJhYXdLVkFwd2xVYlNEdE1DR0E9PSIsIm1hYyI6ImQ1Y2UzMmE3ZjJhNjRkZDFkMGU3YzhiY2NhMmQ2YmNkNWYxOGY1ZmQ2OWQzYTU1ODRiNWUxZTRmMzMxZjBjNDEifQ%3D%3D; expires=Fri, 22-May-2026 06:51:26 GMT; Max-Age=7200; path=/; secure; samesite=none\nvanguard_session=eyJpdiI6ImxENWVRZ2hrdFh6VldLUUo0allabVE9PSIsInZhbHVlIjoiWTNmZHdPanI2bGxtMjNZYjlKRHo0eDZnWXJ3RjNPNTR1VEFMMVQyTzJhSGliejFsTTNLdGdlUXJRdDZvQTNQS0djWjc3UytONHd5WFRTRGZoSUFrY0E9PSIsIm1hYyI6ImVmZTc5MmUzOTM1MmU3MTJmMDg4MWE5OGE0OTQxMmRkMGJhMTliZjUwMzRjMzJmMDJhMTNkMGVhMWIyNTM5ZjQifQ%3D%3D; expires=Fri, 22-May-2026 06:51:26 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: BYPASS, MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 56x23, components 3","md5":"b184f2ad786671179e863eed3c25d81f","sha1":"249c9c8c879e6f184eedb80fed20f82641b07aca","sha256":"f9db57f0cee68c4d613f0c234170513002b20fb4ef3e3d54cd547f6693a2e957","sha512":"82db7a90aa343f67f101b45853440e3b6865d3503f3a9e8b2f39926cbc34ea82bef8c9217af5505b24053bcfa855dbb5fcec7ae82cfcf08d905532ceee4dd55a","ssdeep":"","tlshash":"bd11a50d6b43a5209f0351bf7a497167d2ce7f903cb9a7352af20235c930cf48499b4a","first_seen":"2026-05-22T04:51:59.660394Z","last_seen":"2026-05-22T04:51:59.660394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1338,"timings":{"blocked":940,"dns":0,"connect":0,"send":0,"wait":397,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/sweetalert.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/js/sweetalert.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIlRrCSesvbg8PTlLSuMoA8P3Jj9%2FWDfqJytsHtIyES2jW1QtHheX2Il6FM8AUMfUPF9olONj8IpqIp9x2tRRsBzl1sA3OPIaOPfRnabX5CVaKJivVe4rF4INN%2BsU6BIDmhEXWg%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-4262\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a56a91b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16994), with no line terminators","md5":"2f9966a615f3f46d846807adbe42644f","sha1":"441544c084828da55ca0bafdc4c3df7dc7020820","sha256":"be4d1215ef6f2b2915b7f65cd28b9a9f7dcef17e1f0d883edd19400ca0ea795c","sha512":"e85f14552c1b5837780990e210223c5d6f532dd55f16589f682d1f2f95acc540b715aaac23ce12f871661006f80ec9043a9674dfdec1c3efc0819125d492dff6","ssdeep":"384:Rigwo5UpVZG9lOUlgkhzj7FRNE82XyySyTYayWri/SRVRXFKP9nWZcT2Rc8ex51f:RiB8lOuR5wSWrrRVR1KP9WK6Rc8ex/","tlshash":"ad72c899325438b327e361f1009f504ba4b196bde8095861376cc9e62ff8cc95ae2f77","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-08-11T20:08:37.280903Z","times_seen":7210,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/custom/main.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/custom/main.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CETKwqeubECw8vYSZgBjOxjwOkpLomsbn2OndYIKBIESj3%2F0tKtzoFirpPKEC4AMbEiE%2BAyOEQOVQ%2F%2FXReFeWpM%2FM8aUQXQddnmn7OQOBrawOufK2Kftj9xE39myFCr49z5%2BCQ%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-78d\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a57aaab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6a579f2e4d3b31b3ea017e7b03a475dd","sha1":"8d9a6430face051ae1365d421f15c60cff36613c","sha256":"ca0d1288490dab47eb98606d7e519b4be96e1d5f354b8cf4a6ef39dd1846c41c","sha512":"e5c65863509fb786d1a2ac8a1c0e0ec1446158037079a067eb6976040a0d912e326c2254e7968a7e22ae794d3adad6b9bfccbd2a4eb35dad622676d3a989d742","ssdeep":"","tlshash":"1941cc1df9f665c208b730164f3f451c2163a81f6a09ce40395c65c09fa267ed2dbeba","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.339387Z","times_seen":5061,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/custom/prizedraw_pop_custom.css?ver=1663905027","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/custom/prizedraw_pop_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 38\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 18\r\netag: \"632d2d03-12\"\r\nlast-modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FzODj3SK1kOoOUvCr0mKWQkgst9AO8WDsMCW%2FVApCVXkFSR65KQhQ01fdHQFoqOoOSnzDZzt55QLpBBL21YI%2FswuoYOkM7n2jzfumLiwtMexaKD8U77cKRMbEW2UQ0yctQUDZY%3D\"}]}\r\ncf-ray: 9ff934a5298cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4957b1edbdaab02ae3242ff27d3732b8","sha1":"0fa68da2f11737fdc4d7961a632581c13f7a8577","sha256":"1adeb028e615a654ebf218f188ad6bc841ad3851da01b28dc4af82ea77179108","sha512":"4965ba38ebc9edebf0321e50f78d18cb9562fc234ffaf91715ecc3c9c9842e56a153a3cc9a30d01a234e8be4e0137d35a06dca1dee9b671ce80a4fa10152d485","ssdeep":"","tlshash":"8d7000000002000082308a280802002800a8b0822200888c8880002a302a0020000880","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T08:47:34.294028Z","times_seen":5172,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/common/storage/cms/cms_1052.webp?ver=1774418327","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /common/storage/cms/cms_1052.webp?ver=1774418327 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/webp\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"69c37997-4856\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:58:47 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 18518\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c33bIq5DX9FZ0%2BGKnnHGuOE9oAcolHLM1HrlKJPg%2Fam3XQaO6plxq1dZDrleh8ElBqkNwzxD7B5miVOepEYbYLqJRXj0PQ%2BPixSbMoEv%2FdQ%2Bp0heXksTOaJ%2FfquG8C%2FIaXLf85Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b938b3b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 844x214, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d7f65856366fd4f6d989a4120265868","sha1":"8c60923667aef638e5be2107f872ffc1973c823e","sha256":"f9befd4e26f59abeeb87c3cf57f1667f67f359c724c49a1e3b0bf7074d08774c","sha512":"24d4a03639ee28f3043868525f4f7a89037951ec0817f683bc155a1780f8f1fcae5500f102a1b1097aa1c6cb42c8c0e4b155755d55a8d7fb3126384df2069690","ssdeep":"384:18dzfbDAwCh+9Ii9p3PcCKGDKcaPPsZoHAtXPjmMkThl:WRAK99p34GDlaP0E8qMkThl","tlshash":"cf82e15166b91f9758d02893915e20d12221bdd6070eb2a7bedfcdbd478d9883f781c3","first_seen":"2026-04-08T10:41:45.172266Z","last_seen":"2026-08-09T21:59:44.888081Z","times_seen":31,"resource_available":false,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/js/www/decrypt.js","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:24.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /js/www/decrypt.js HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:25 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 531\r\nConnection: keep-alive\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nEtag: \"65572be6-213\"\r\nLast-Modified: Fri, 17 Nov 2023 09:01:26 GMT\r\nExpires: Fri, 22 May 2026 16:51:25 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: UPDATING, MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"1d1d23f897c7f9fa4b24eeb8159d7e21","sha1":"9c6ab5fed65abe81454978f1e844c4f36d61a1c7","sha256":"8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869","sha512":"4d258cf5b37b503615a1373aebf3474ec8f94351455729665223a9318067ca6b815d0bf3c265ead937660bfb3b0e75b25f450ef1b235a64b32d87df01e1b8e32","ssdeep":"","tlshash":"b9f0bec8adaffdd4add295d2627ec809a99315430209df52b688ac1c9fc80281a2b0f1","first_seen":"2023-12-21T07:44:20Z","last_seen":"2026-08-11T08:47:34.366715Z","times_seen":4760,"resource_available":true,"data":null}},"time_used":1379,"timings":{"blocked":575,"dns":1,"connect":177,"send":0,"wait":225,"receive":0,"ssl":398},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/swiper.min.css?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/swiper.min.css?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 3631\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5fc5abd9-4bef\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfV6iZww1sTvYxfrAwgphOTzZNvrqtJPCwlIZMI7RIeR9cfEh1u122Jga%2FRxqM4zFbxiJShKvqhqueFO4ThyYctTWFQcQyWLipBK9X4CQTWL8YWA9oaQdqru0NXc6XKMxsz4BcM%3D\"}]}\r\ncf-ray: 9ff934a539d0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19439,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19174)","md5":"319f20c8f06461463f24bfc703551a18","sha1":"f3bc53e03aefc4ee3be3adbcc707f7ed4c1c65a0","sha256":"67b6584af0fff14908d8f05c0eb9d59cb809da113feffd197f3ddb38a779ea45","sha512":"56439e25a232e6f80b79505aa867b341628cdc5818be22d4d83b7dac66d314a3d91f3eb4dcaa6240795c1a5f990322082c2e85e89a9fce6721cacf828cbe2c4a","ssdeep":"192:YxaNv/lSSyJWCj8zfi5o/uDN3eBxwdJ5c:Yxa1/lS0CYfi5o/uOGJ5c","tlshash":"8a92602c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T18:23:47.483281Z","times_seen":5231,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":62,"dns":28,"connect":8,"send":0,"wait":832,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/unite/header_unite.css?ver=1744941936","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/unite/header_unite.css?ver=1744941936 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 1796\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 4957\r\netag: \"6801b370-135d\"\r\nlast-modified: Fri, 18 Apr 2025 02:05:36 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZT6SWHwdex4tZrF6hVrcG7KcbFtfLeekuAItatwZcLN7PPdbnXSQyuCj%2BUhunVnxF4cq3IxhKkMk0akkFKIcgKu649pcDM%2FoXGWSKcBjNkFu3xLIwTCypXq%2BBAw5Ky4SoHmL6Y%3D\"}]}\r\ncf-ray: 9ff934a539afb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4957,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b934b75c09f2645b1e46dc5a89d13fe9","sha1":"91a38586f325f7b98af5eef96d66f38a04dace2b","sha256":"f17daf0db63aa8fbab2a4a73efe37469d9b17d13df2a1d7ad0512671c6ebb408","sha512":"d8e77a3eeb8a2d055767cbbe218a53bafa85c99fa3efaee736a4dd74743b922e6d64115317560c72969d0e3496c13f5b684803ca71ff6b0c4b3f7c0fa7122862","ssdeep":"96:N1/uCASG8K0h91s2sqVKnmqHuRbElB/sAx7BdlAfq0WO:N1llK0h98nHkbaB/HB+N","tlshash":"56a165ba9304100ab367d56578a0cfea63bfa1918442ab7dadf9304dc4ce1d456f62c5","first_seen":"2025-04-30T10:38:17.688345Z","last_seen":"2026-08-11T08:47:34.357512Z","times_seen":4312,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/js/swiper.min.js?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/js/swiper.min.js?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nC2tgp8FbFVp0i%2Bgt1VAjJ1Chjse9G0RpnW287q9JyIIa2jX2fdhskXLzVRDIPBf5yaH4CjxJ7zj6s8VE4syzF8JUwCqmrSD7Oi1XTZS1QftBnP3KIzoqfUCB4eFoLikj40ydg%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"5fc5abd9-1bee5\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a56a8eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114405,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271)","md5":"b8be4ec964b15c656c05a17f822762b3","sha1":"1afabbf1eeecc4d7ddfbb4c824696ce1aadc8d0f","sha256":"e32b2b578b1345c05be32292da9016f7ff564bb3f4aeda3c1b6b76869648fcbd","sha512":"0abfe93e1dab3db289b0efe0f92e42f6ff14cc4e550b5bca8d4a84fe736245fb70b39e5b86bd9aea620e6fd73a76ce8aaed9d3a561c6208dc9108778dba141b9","ssdeep":"3072:2hUcC5HqffYIdcMZOGHgZsUOUIBdID8CX:y45HqXYIdcMZOGHAsUOUIBdID8I","tlshash":"7ab3094eb35071a551e36257525e8241a3b72409780ad0ac35b6d8ebacbde4c13bfefc","first_seen":"2023-03-07T13:49:42Z","last_seen":"2026-08-11T08:47:34.296021Z","times_seen":5164,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plugins/jquery-ui/images/ui-icons_777777_256x240.png","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:29.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plugins/jquery-ui/images/ui-icons_777777_256x240.png HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plugins/jquery-ui/jquery-ui.min.css?ver=1606790105\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"5fc5abd9-1b65\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 7013\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhUQDS7y4E27Q1BH4Dqr0ze0ChPRFLFzEeczcYieKcsmCnovrYwN%2FdT6Z5jCuwqAKTrCB77fCh3v6WFaXijyLhe21SeHMt0xHECh%2Bb84%2FxLKg6WWYMbOhjk740mCB%2FpFt5ZAF%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934be48c4b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7013,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced","md5":"40bf25799e4fec8079c7775083de09df","sha1":"4fc6b1449c73f5d10489c104225ebe326a4016ba","sha256":"e75b27211e16fcf94715168001bb7055ca376d46f928110ba3d0825232452e5a","sha512":"51c9e46224098e9270bf51bec93e0528b5e726a632a1de57863fba531d914a9db1d3fb07d22cef756f6fc9e999bf08043e73bca6225a9ab7efffe2904105c388","ssdeep":"192:92XiIsTugcTnouLuIXdj7Z7rgmlWRI1ie+BVtNzDby:AmOTnwCnZftW61ie+BV3Xby","tlshash":"5de19fc1e5f8c4e0dd58e668ee886209c7a658b9064742dbcf0485694b48d3186fab8f","first_seen":"2023-07-20T10:40:17Z","last_seen":"2026-08-07T13:00:19.837316Z","times_seen":1483,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/custom/login_modal_custom.css?ver=1726649910?v=1779425483","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/custom/login_modal_custom.css?ver=1726649910?v=1779425483 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 823\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 2599\r\netag: \"66ea9636-a27\"\r\nlast-modified: Wed, 18 Sep 2024 08:58:30 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bw8nCuKBqlx7k9laouMexhzzywKElOervzAyrRKFruc7tjHFQylDC%2BVTkWsCwXkbXduRwdidk1u4ccV%2B6ToIjoCP61qQa3ZBStDo1ZmqhUYxCrYkLjQFS54v5MbId1gjwhfamd8%3D\"}]}\r\ncf-ray: 9ff934a5299db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2599,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c75b5945911bef16c0cd8b1bbd224e69","sha1":"332ea5f2c678947e5a8249dce324c64c13fcfa0c","sha256":"cd13e75be474860e8c9667061fd0ab7b3e998a2999171faad08d189173fe2a26","sha512":"3a37bd8c0f1591bfaf40e97f8cf56728a5dd1737542843f4736997b3b4c0a8453f35a4295dce0947bc22ea23b78a54e17c59f8240c5d2bd618909e8ceeccdf92","ssdeep":"","tlshash":"625158026ebf2e93908c406d35dd4e85225d400bc568ee2e3ff723648f5a6a6e577f44","first_seen":"2024-10-04T10:30:01.430548Z","last_seen":"2026-08-11T08:47:34.30139Z","times_seen":1456,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/custom/login_custom.css?ver=1663905027","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/custom/login_custom.css?ver=1663905027 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 92\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 105\r\netag: \"632d2d03-69\"\r\nlast-modified: Fri, 23 Sep 2022 03:50:27 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnfJbjDPQI3CHjjxUQ7JcZb6eC6%2FzVAKy%2FLiEYsBYS15uxjMSC7NfbOdWNoy8%2FtiN%2FZ%2BEoxOd%2F6FwH88I%2BA2Ouf6fuE1ZJr7tKe7rgu1YYtYmQ7cxUguG%2Brglr6tSE9LQxNT8Fo%3D\"}]}\r\ncf-ray: 9ff934a539aab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d520ae5e8e22ca748c7a9f42456b2999","sha1":"bc32a4581b85bbba126872bed2d05be6e8db1c96","sha256":"2ef18a39610b5f98818cd76249061e93a4bc8c01677b51d73ea80fd3b1519865","sha512":"2a6bd8693789250119a0a9fb8d109eea7ff436ac974ea547b5ae7282d4e6450f2c1fc7c076486395d056ad7cc775f3ff5cbf1cc08ce718e7f5e2a58e0ce90ad8","ssdeep":"","tlshash":"1db092900c5a4f238407c595689a87018e3d90219f888f2f0c3928a4ca8af1410a6670","first_seen":"2023-04-06T15:51:59Z","last_seen":"2026-08-11T08:47:34.318699Z","times_seen":5053,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/member/call-request?check=1","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /member/call-request?check=1 HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im1BN3NXR1RBUXNHbEMyNVZWWFFpK3c9PSIsInZhbHVlIjoibVQ1cktIUWV2cHlpdElzc1ljTTVCQ0VYR2orc0lXSXBoVFVPUWRHbEZkK3JQRHozeDhyaXZSVzFieUpUWENuazJLZGJhYXdLVkFwd2xVYlNEdE1DR0E9PSIsIm1hYyI6ImQ1Y2UzMmE3ZjJhNjRkZDFkMGU3YzhiY2NhMmQ2YmNkNWYxOGY1ZmQ2OWQzYTU1ODRiNWUxZTRmMzMxZjBjNDEifQ%3D%3D; vanguard_session=eyJpdiI6ImxENWVRZ2hrdFh6VldLUUo0allabVE9PSIsInZhbHVlIjoiWTNmZHdPanI2bGxtMjNZYjlKRHo0eDZnWXJ3RjNPNTR1VEFMMVQyTzJhSGliejFsTTNLdGdlUXJRdDZvQTNQS0djWjc3UytONHd5WFRTRGZoSUFrY0E9PSIsIm1hYyI6ImVmZTc5MmUzOTM1MmU3MTJmMDg4MWE5OGE0OTQxMmRkMGJhMTliZjUwMzRjMzJmMDJhMTNkMGVhMWIyNTM5ZjQifQ%3D%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:29 GMT\r\nContent-Type: application/json\r\nContent-Length: 40\r\nConnection: keep-alive\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nSet-Cookie: vanguard_session=eyJpdiI6InNrdHJBYVwvc1FDaEh3dTZMb1wvTTF1UT09IiwidmFsdWUiOiI2dEJ4clRDa2pES3NoUHBHVkZNTDdpS2MxT3FLWXZZMDdlZ1NOXC91VGZ5dFwvUWwzU3hDQUVyQ08xcXoxK2doRUZWSjJ6WjE0emVvU2REYXdaWjdwQUZRPT0iLCJtYWMiOiIyMmE1ZjExZmY0ZTliNzM0NmYxZGVjNGMwMzgxOTg2OGZkYmJiY2UwZjBmYmJhOWZjZWViOTM5YmVkMzk0NDc1In0%3D; expires=Fri, 22-May-2026 06:51:29 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nExpires: Fri, 22 May 2026 16:51:29 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: BYPASS, MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"27a5688b27ae3688ca0183ce926be3c8","sha1":"fa4dec3b6af6674afd7b14710cac41b15ae75b29","sha256":"4359a477fc8cc8212517f5a190d4aa0a7cd1c85509d56d2a6a8efef408420ad7","sha512":"d73bb567a0b0280d42dda28c8e97725e96529072bd78d0844786e008d9ce3f89c7c3399eea85342be65d7b440d6023094b9f2f5d624e7dde0a46fbfb1484bc85","ssdeep":"","tlshash":"e19004cc7747575c040c40c54d44004453744d005c500c04445c11c534401570750401","first_seen":"2023-04-15T09:13:24Z","last_seen":"2026-08-11T08:47:34.291297Z","times_seen":4899,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/css/custom/header_custom.css?ver=1685593131","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/css/custom/header_custom.css?ver=1685593131 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\ncontent-length: 1544\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncteonnt-length: 4669\r\netag: \"64781c2b-123d\"\r\nlast-modified: Thu, 01 Jun 2023 04:18:51 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcbsqXha53w%2BmxtZwceY5TRgZr2nmHDS5%2FtTwOsfU%2FjIBUEtQxHI8TGHl0gURqrgKnEAlpVkLQ9peYVQWgTL2Z3HG2%2FL9SFQcWjeTwkcAWHKUcS3RjZQ405t4qwFN96LqfPjhfE%3D\"}]}\r\ncf-ray: 9ff934a539b2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4669,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8c1d7cb0d8d0ec4d0606d2fe041d441d","sha1":"d5022e66ea6dd76d8faf35eac9e61e57d9bf576b","sha256":"3d4ba43771ff079b69c9e9ca24bfc071c394c76fe0026e6989dba82d72be26b2","sha512":"1f1382590ac00477e96d4c1aafafbba8f09f5bc04fe7a45705a9c33f6777ec8df9270402ebb73a04e2099c13bcdcbdbd81fc27109624f91f654f130266f674a7","ssdeep":"48:euoBh+s7yZGMWGo494ebPMLirC80poPdRo+fblGA51/p850DAs361bd8xEED:euor+5WiSebA7G1RnfRGoC0DZ+S","tlshash":"4fa193a783d72449351586f0fa99bfa4935f2093c005ed38bbe4316d5fc2185a7b234d","first_seen":"2023-06-29T20:11:15Z","last_seen":"2026-08-11T08:47:34.302332Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/common/storage/cms/cms_1051.webp?ver=1770027532","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /common/storage/cms/cms_1051.webp?ver=1770027532 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9194\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69807a0c-23ea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Mon, 02 Feb 2026 10:18:52 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mUxUwZmAAM5YIlqLNp1lDO0Vz9LszV08omsTW2ghzULkGhZEVEPSSJrup0KDt4IVtIfUh8fIRRuZul4pFvRw2t%2FT%2FmYf1Fm%2BuVgKeKk8yQ0mGyyc%2FwS5G%2FSUdNfdnO2JrwSfuo%3D\"}]}\r\ncf-ray: 9ff934a539b8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f70dcc71dffbcffeafe431845446b24","sha1":"310b7127ef288783c0ab9f1bb613fc8fe8a8a915","sha256":"20f9dac8149d9272b8b1cf2ed768e9eea82ad66edceaa2120fdf4ebcddc03a18","sha512":"93791efc2c49e8d62a24f4b965b33e0b395e9e6f964fd2ac3ecc770e08131b60221a1651d193bda6b0fc98c368464c3decec45a5ac4baf0c494ca559cf37810d","ssdeep":"192:c8ByIHRftzQdpxBag7zJWzy9mvImtRyEDDx7eN+fFq9OJRce8F/:cqyIxFQdJagff9mgmZDxqYfPX8F/","tlshash":"bb12cf6327a6c3f5c1a32223f0fd91d245f6d498f99b9438225a75687ef42ce108e07e","first_seen":"2026-02-25T14:49:47.158454Z","last_seen":"2026-08-11T08:47:34.361652Z","times_seen":43,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/promotion/images/uploads/51.webp?ver=1774420025","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /promotion/images/uploads/51.webp?ver=1774420025 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21706\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c38039-54ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 06:27:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdIcSFKXLsy2xpuKw0drdi3YQCgKF%2FsYThAoaGjkjes32xK%2F99GvslzuYQ1aisiUqwOylgh6NCWJTT62vvCghvlfc2Z4I9%2BE%2BBi7lvd9mpr%2Fjo6xUNDeK85Cl4Mqhddk0Ksa0Y4%3D\"}]}\r\ncf-ray: 9ff934a539d6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21706,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1003x133, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8035caf84648bec43b50e6a3998be5f","sha1":"8d1463e88e5b18a5baacf8e785f1f98e12b0ca67","sha256":"f20f03b392b085ce671caf7600e193a57c7009363de8f81c3d707984a1869003","sha512":"bab240a206f90dcc63b54757831d5ac55eb0e563bb7ff0ab70a3105ec3a586d2cff5aa16daa54e00d163da43983f7f454ccad72ea25c594c355f25322b4d0e67","ssdeep":"384:M/fcSiDijG9+36E34CeoEeDx/oJvMArseyb/tijs4+1a5YeV9y2pToc:M3Kj+36EoC6I/eRsxy+iYey2pTf","tlshash":"d5a2d0fc4b985a421f7d3f63fecd0085ccc42aeb75c9b2bda51446552a7b1a10139b2a","first_seen":"2026-05-10T19:50:54.172783Z","last_seen":"2026-06-23T18:27:49.695782Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1054,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/js/carousel.js?ver=1637918556","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/js/carousel.js?ver=1637918556 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ldKhd1sp9QXjJr0wUdLH%2BoneZEQMFXUgG%2BRrhYyxZd%2FiGzgLb89CmRTjTvWIegR8DsV3GxnoKaRFf6QW3m8iiLUnmE8bQ8zm6FswsExEsDCPMWuKfkytwWEhXXZglvgLqNQ%2Bv98%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Nov 2021 09:22:36 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"61a0a75c-8da\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a549dbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a55f280dcdbcb4a968d8f6364a2714e5","sha1":"7815466d8a2584bf137ad80138462b39cb62d236","sha256":"c2e540b8dda366b0898cc14ecda800ce2787ed2222b6ca38f67444882d8abd75","sha512":"f8404ad28595dd418ca26a6a7d1a984eb38d7a83ccee3286ed90c34c3c72f7c57cee42c59281ee9071b32c30c0c91d4d5ff5ff40c5741e75d611c1b7a8b15485","ssdeep":"","tlshash":"cc411124dd7214389533332991f7cb45ef2ea767a6418ca770fc4129afb0409569cee9","first_seen":"2024-12-20T12:48:50.204122Z","last_seen":"2026-07-19T11:09:23.445716Z","times_seen":97,"resource_available":true,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/js/unite/moment-timezone.min.js?ver=1663911608","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/js/unite/moment-timezone.min.js?ver=1663911608 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgVjPOHGwTgklzD83P43oV0RbZEPBt30piwkBTVgujROnIpNpTS6eXQrAEkJzQTIToJM%2FW7TAi%2FW0r1c0GVFATYZ3TITUCyzPvJnmeeMbsM8jCMjOFwTz3ClZ%2F5ndS6lTplgaVg%3D\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 23 Sep 2022 05:40:08 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"632d46b8-d74f\"\r\ncontent-encoding: br\r\ncf-ray: 9ff934a54a0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (607)","md5":"88fb4a278aa21a9116c7c91d4091c2dc","sha1":"938a777b5afb85170ecba565280327523844ccff","sha256":"b04505388f10657744e0fb1b3d5bab6232d1f1a3144c11b3693f36447dc27a6b","sha512":"3ebf18fd3c351de2da9b6dde2b269563b9d9ec0eeefcb86a0c42aa1cb4736788c47ccc861f182846411d394fc09cd6bc68771804b9bc8391cc65ddc035541527","ssdeep":"768:9CFCFS8nv9KkkBTShRDCDnievxeIdj2k+I9:TFroMRDCDlJXjTv9","tlshash":"29331d47466e395251a28017fc0eb7c9606ed1114cd95ccb6fbc22a3ca68ef5bb33a17","first_seen":"2026-05-10T19:50:54.180969Z","last_seen":"2026-07-19T11:09:23.451125Z","times_seen":22,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/font-awesome-addsvg.css?v=2507231","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:27.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/font-awesome-addsvg.css?v=2507231 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/plugin/css/font-awesome.min.css?ver=1753257975?v=1779425483\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 22 May 2026 04:51:28 GMT\r\netag: W/\"688097f7-5ce0\"\r\nlast-modified: Wed, 23 Jul 2025 08:06:15 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0wapXaoOCksw%2FZWK0mApTQP37Ojk9oWg5CaL20uxfhbuirfhCfrbx3EN0AI6VKJugJyQ0taMNjmPDfE3pF5qKcq6pc5X%2FkA9lSV0pX5TwEy8kRpYg9nxArAL4h%2BwAkSXTIn6ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9ff934b2e89ab4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23776,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2811)","md5":"6097f31c1b8ed2b58b36a26a704531d1","sha1":"f9d2b2c866d186c372ff6c11d5f69e608ca0f457","sha256":"4acd44ed0da6eae50d2f4b38649e6085c73d3202c08ba85870be5e0eb80a55c9","sha512":"a02f15b6e01f10bac28e3e1e24f8605ab65bf0c1e0a10b6746cae341194037cc71b124f39ee75fbe28bd1175f329e7065595437131f8856801c574642b84acc8","ssdeep":"384:AD+8djF3PcO3Pc4XfVK2wMXyWq73r2wMXyWq739WqMWqq2gw/2gw72fQ62fQ99:S+wxBjVHyvjqyvjUi1wDwq9","tlshash":"86b263b2460a78e24d143b3bd2a92a0d574dd6e2fe93ee56d07609588b0ff1837471bc","first_seen":"2025-07-24T08:18:26.078876Z","last_seen":"2026-08-11T08:47:34.360826Z","times_seen":2888,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/plus/plugin/css/jquery-ui.min.css?ver=1606790105","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /plus/plugin/css/jquery-ui.min.css?ver=1606790105 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: W/\"5fc5abd9-7d4c\"\r\nlast-modified: Tue, 01 Dec 2020 02:35:05 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8kSavLQe5HXka5n9hISMHvkLkuUvsOg4xDaUEgVjqEDP4q4vDTErx%2FY1bHSYECa1l6tJCNj7ykbyLhddhvfILBXVRoGYU4qeAErp0RkGzbVzV9gZd56GQBW5CMcYi6SPloG3Ik%3D\"}]}\r\ncf-ray: 9ff934a539beb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32076,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29137)","md5":"0b5729a931d113be34b6fac13bcf5b29","sha1":"88ba90d2d2944315afd28a706ee5715ed980c634","sha256":"ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29","sha512":"68e1b473a9cf3731a4fb9ce3c3225aa1152009d3ab7d20e198c203daee3e388b25af41a3a4b2a8ed79b4028df19a93384fc026228b9192ac23d67add56c2ca11","ssdeep":"384:pCwiEt7lcR8lOXHc11evBMzymUh+4C6G/zDcSc7nfZBhVi:slEtiXHcEBMznURC6G/zD8BhA","tlshash":"ade25330a5c2242dfe33c23060e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-03-10T04:06:13Z","last_seen":"2026-08-12T00:15:29.320793Z","times_seen":11962,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":66,"dns":14,"connect":5,"send":0,"wait":952,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/promotion/images/uploads/94.webp?ver=1774420032","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /promotion/images/uploads/94.webp?ver=1774420032 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14292\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c38040-37d4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 06:27:12 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npc2xC8XKZOPfA8ktmRqEbp%2Buk8APmlc5ul%2FuYBiRl0LDHPyPpc%2FVOrVdpUBHO3%2BsBU770WSNCQh0YH4BEGO8LJBFh2YwTBHBsWr6uXBjEqf1ZEH4YVp8EbBhloJEqcxAFdFGvA%3D\"}]}\r\ncf-ray: 9ff934a539d4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 736x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3753bc663ddcf1a839f7ecb88980ade8","sha1":"cf5b47ad78403e99f962285f449a7e905ea78452","sha256":"92c254d048a2052c9bec955f18ec3fc017c57619123469eeb465736aba25bf35","sha512":"e2765bad734b17e0b8a9a95ae583bf6ae1395948fe58a5a68e14bfca7ac56205e1b1ffe3a8fdd904cc0f3c1606149e1b5758b7b913699a3762a4cf43ad251534","ssdeep":"384:7M1uaLdNjxePwQGuRqP849LP8vSQt4OmvjZZY69vqfE/:ba7jxrx84yv/jAtq69vqfS","tlshash":"3152bf50df5d35e00a2213adc8e389613e128ad9c853d381af7625027edcc16c970e8b","first_seen":"2026-05-10T19:50:54.252149Z","last_seen":"2026-06-23T18:27:49.674247Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/g04.webp?ver=1774418305","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/g04.webp?ver=1774418305 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6688\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69c37981-1a20\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 25 Mar 2026 05:58:25 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTKhLRo57OO%2Fudh2kVjfoAeJP%2BPPK6x%2F3nMhptSWqiGb6WzCdDITKNugh6jkaCtbdHcYg6ZFbQfw8ab8CcQOtg6pEv7GF6QlPgCJnY4Ony4X1RZccYs7D%2FCXQf76GPKsc2zJ2ho%3D\"}]}\r\ncf-ray: 9ff934a56a68b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 271x81, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47a63db2bdbb7a6a28679200f3c74908","sha1":"d3e30b217d6362303b1a8d096d10be89a81cc597","sha256":"67d732d2d884b6d203abf8b36f60ff284e1fd1d3cb5d3afa395e0c7bc0ba30de","sha512":"c025b670e17b2eb8e0b362870d98dc4e0b65f7047ef7a501c512ced966355465e95c6b9a214fb93ebd522c99436b17d03013e15e198937d82923d87cb529eefa","ssdeep":"192:ck40HUEECF4zTL/iMfMIZpVrdn9OK1dJ8YVxEn:LVZaTOMtgbn","tlshash":"dcd1af7319ca903ce631fa4ce1140153a8353ed329cba8a2a3b1ba6275bfd971d1d5c4","first_seen":"2026-04-08T10:41:45.196634Z","last_seen":"2026-08-09T21:59:44.930576Z","times_seen":11,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"taofangzhe.com/plus/js/unite/crypto-js.min.js","fqdn":"taofangzhe.com","domain":"taofangzhe.com","tld":"com"},"ip":{"addr":"216.118.239.164","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:24.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"taofangzhe.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 00:05:37 GMT","end":"Sat, 11 Jul 2026 00:05:36 GMT"},"fingerprint":{"sha1":"B2:2E:34:83:3D:2A:5B:BE:20:75:56:95:2F:B1:E9:C5:E4:EE:99:62","sha256":"CA:25:04:34:7A:97:D7:AF:FF:4A:97:7B:B0:88:E5:43:09:22:CA:6A:D0:4B:E0:97:01:ED:15:0E:F4:0B:C2:8A"}}},"request":{"raw":"GET /plus/js/unite/crypto-js.min.js HTTP/1.1\r\nHost: taofangzhe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik81MzgxalVIK2NLV1RabVFMcTRjcXc9PSIsInZhbHVlIjoiTERLZG1Xa01iSEl5bEljV0VDTzNmZDhBZmxtbTVMQkU2ZE5US1FDRDNuSDFsV2hWMHpNb3NGXC9lS0lYb1B4OHRGQnJ1MFkxU1BZQ3BMRFNmbE5SZXVnPT0iLCJtYWMiOiI0ZmZjNzE2NWMwMmY1YTVkODBmOTQ2ODk3NWEzYTc5MjBjYmRmYzQwODg0MDI3YzA1M2E5ZTM4NGUxMzQzMjczIn0%3D; vanguard_session=eyJpdiI6IklXQ1hLb2Mwd25KU2x1ZTdFdHlCQlE9PSIsInZhbHVlIjoia3NNcnRHZTltcm1BQWQwSHlNcFdVZ0dpQVdrTnFQMEJWdWhPUlA1ZXJhNEloM2FyZm85SWNiYmIzZXk4akx2KzJYNWhqNWdvK3EzOG5hV0RnWlNjS0E9PSIsIm1hYyI6IjI3MmFmNGRiN2Y2MzA1MzQ4YTExODFkY2VjZWQ2ODY3MzMxNDJhZDUxZjIyMjBmNzNmOGI2Nzg3OGIzNmE0ODcifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 22 May 2026 04:51:25 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAlt-Svc: h3=\"67e285f0.gk620ge.com\";ma=604800;persist=1,h2=\"67e285f0.gk620ge.com\";ma=604800;persist=1\r\nEtag: W/\"61dff779-bb78\"\r\nLast-Modified: Thu, 13 Jan 2022 09:57:13 GMT\r\nExpires: Fri, 22 May 2026 16:51:25 GMT\r\nCache-Control: max-age=43200, no-cache\r\nX-Cache: UPDATING, MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47992,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-12T07:40:13.836855Z","times_seen":77058,"resource_available":true,"data":null}},"time_used":1592,"timings":{"blocked":562,"dns":0,"connect":174,"send":0,"wait":289,"receive":177,"ssl":387},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-22","alert":"Sinkholed","trigger":"taofangzhe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-22","alert":"Phishing Block","trigger":"taofangzhe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/index/en/btn_start.png","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:28.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/index/en/btn_start.png HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://5getfab.qdhyxt.com/plus/css/common/index.css?ver=1700473959\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\ncontent-type: image/png\r\ndate: Fri, 22 May 2026 04:51:29 GMT\r\netag: \"64114898-3b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Wed, 15 Mar 2023 04:24:56 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncontent-length: 944\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmzoKwV2FN6hmyhMpqQg046kV50ZBVcWbkeUOTAVDx7ghjp9K4wUrzoUmPCtA8QIS8PQ7tACTjjjK%2FjDf%2FLbJX93%2BNb80fQF4g19aVaREpEj91PuEXbTIaH8A74jdoyUbGeLFzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ff934b938b6b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 15, 8-bit colormap, non-interlaced","md5":"4877463a72742c21c36f198abaa72496","sha1":"b6286b50e4c7f1b551ea5d038afb40a6905cba6b","sha256":"10d9f5a229d90b3553c14a9c48b3b94e927257aa6cd252ee7d4c12fdab6e0757","sha512":"8f770782f78fa54f42cf3fb82353525ba56494347d6d6730be29132cd7dd97105c61bad8d662fea59749248b98039f731e57b0cef4ba09e0925d7d8a29276589","ssdeep":"","tlshash":"db11449da3108f506577309ea6586338bcdd0c52cd7aa4995f82f2a80bfb31542649c1","first_seen":"2023-06-29T20:11:15Z","last_seen":"2026-08-09T21:59:44.890004Z","times_seen":446,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5getfab.qdhyxt.com/images_plus/celebrate/e20260331_FIFA2026/MEX.png?v3","fqdn":"5getfab.qdhyxt.com","domain":"qdhyxt.com","tld":"com"},"ip":{"addr":"172.67.149.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://taofangzhe.com/","date":"2026-05-22T04:51:25.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qdhyxt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 11:16:36 GMT","end":"Tue, 07 Jul 2026 12:13:59 GMT"},"fingerprint":{"sha1":"73:21:86:11:AC:DC:99:D2:28:0A:F7:7C:99:35:E5:74:E6:B7:D8:ED","sha256":"C2:B3:3E:90:89:64:F0:B4:F7:E9:C0:C1:B2:A5:10:7B:E1:7B:9E:04:47:CD:07:D4:0E:AF:69:4C:76:FC:40:C8"}}},"request":{"raw":"GET /images_plus/celebrate/e20260331_FIFA2026/MEX.png?v3 HTTP/1.1\r\nHost: 5getfab.qdhyxt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://taofangzhe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 May 2026 04:51:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 120611\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=315360000\r\netag: \"69e19c77-1d723\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Fri, 17 Apr 2026 02:35:35 GMT\r\nserver: cloudflare\r\nx-cache: UPDATING\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Wzi4OaedwcvTD47yo5JRNpRSxLimHUI4qZbAQOcoSaRlcFhqdtKG8%2FfaRo18ACKdzLWr5Kqd6vWlxNkFuuAFYi2P1tCpBYehr8LJ9Szj%2FsHONVrWkS40Uxb%2BGDsm2VrLdc0cng%3D\"}]}\r\ncf-ray: 9ff934a539ccb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 344, 8-bit/color RGBA, non-interlaced","md5":"b39c83c0b13e78a8d1bfe5d162437c43","sha1":"49e2752062651f4f1db6a077da83e5b73dae09d2","sha256":"cc9b26dfe958aaeb3f9771bb962774200de3ddd79cbcdca0087045f52e9dafc3","sha512":"624c343c8ded3fd4130622611c4fbf493fba47df4cfe378c7825c045061378ec3480532b0ed47af91b03bbba6d20cba16bb646174fc3a3cb430f0268c6308815","ssdeep":"3072:V34qYajzitFa6i0eJ6+/HsbIPLeWYi9GdhPZHZ8B4GmD48F:VoqYaXCZi0eJ6+/HQ8Le+9GU+GC48F","tlshash":"7ec30247b8c550d97b84e83206037df08bb166c8d0ba9d8fa399476d0ded66ff9424e8","first_seen":"2026-05-10T19:50:54.257646Z","last_seen":"2026-07-19T11:09:23.448293Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":655,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}