{"report_id":"2b8c8f7b-31ff-48f5-90bb-b66cefea148e","version":0,"status":"done","tags":[],"date":"2026-10-13T06:56:39Z","url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"104.21.60.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a#51791874562906","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"title":"🍫Indomaret - Hari Jadi ke-38 Hadiah💸️️","dom":{"size":85115,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30676)","md5":"22951010d0266b14197c3c5b0c12f2f8","sha1":"fa521915a00656fac05cf13702ac6b3ca26d2027","sha256":"27f7f72ce1a586be291a11e65f9079d69752b963155fd0f189b7fd1eb6e745f2","sha512":"6c8116a71117790068841f5d222fe232eada29c41e02a55e64b67608e3bf5f7a6dd1176df49b834d3b8f91d1da3707457ef6f30244b3948e5b895841744e78c7","ssdeep":"768:egCI8bVGng3/A0FFBFlsFBt/JP2KIam8gKxBE9feE9VoE9PzE9dFLrE9v7E9vMEy:cI8bVuSL/sv2Kep9eJg2zq1Yo","tlshash":"7283b869a986513a7907816817a2f36839fdd04bdda3cc28f9acd2508fc3ecd5e716c4","dom_hash":"domhash5d7c1b459f55d7eb06540b8e5b87af71","first_seen":"2026-10-13T06:56:46.776247Z","last_seen":"2026-10-13T06:56:46.776247Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"104.21.60.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T06:56:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-11T23:25:40.076337Z","alert_count":0,"request_count":1,"received_data":80789,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"u.jsdelivr.me","ip":{"addr":"104.21.17.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-17","domain_rank":6320668,"first_seen":"2024-12-29T17:00:32.942237Z","last_seen":"2026-10-08T21:19:03.41987Z","alert_count":0,"request_count":1,"received_data":29794,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"indomereat38th.cn","ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-10-13T06:48:13.071613Z","last_seen":"2026-10-13T06:48:13.071613Z","alert_count":6,"request_count":6,"received_data":246289,"sent_data":3169,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:11.26.24","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnwix.com","ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2025-12-29T20:56:46.470511Z","last_seen":"2026-10-08T21:19:03.772513Z","alert_count":0,"request_count":12,"received_data":254284,"sent_data":6840,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"img.tanmi.net","ip":{"addr":"172.67.150.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-03","domain_rank":0,"first_seen":"2026-07-02T02:25:22.671689Z","last_seen":"2026-10-08T21:19:03.651116Z","alert_count":0,"request_count":1,"received_data":687,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnmi.com","ip":{"addr":"104.21.23.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-11","domain_rank":463756,"first_seen":"2021-02-01T17:26:14Z","last_seen":"2026-08-26T19:04:38.70845Z","alert_count":0,"request_count":1,"received_data":2108,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-11T22:48:14.897501Z","alert_count":0,"request_count":2,"received_data":1068932,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.clickpoint.top","ip":{"addr":"104.21.35.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-04","domain_rank":0,"first_seen":"2026-07-13T08:00:27.485013Z","last_seen":"2026-10-08T21:19:03.780976Z","alert_count":0,"request_count":2,"received_data":1378,"sent_data":1268,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74263edf113c972bfe9a32b1ccd04171","sha1":"9267a8e17e8b0c2eda47f7a495a2225dddcfc955","sha256":"ada30b2af336b11c730c8c89ab66f03e247ad42cb645b12368bc5cdae3671768","sha512":"6f76cfe09c6c2b1a9d2f52171ce9c3290b452d95a03d5f6ba06a10977a7ffc4a49f68213bd0c2364c9c79d488e15757286eafce8280c381a2edd801ae5e97227","ssdeep":"","tlshash":"3d8000800a88282a88000cc0808808a80280830cf28c88c288af0002030b02220c0e03","size":30,"data":"","first_seen":"2026-07-13T08:00:33.482837Z","last_seen":"2026-10-13T06:56:46.814399Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f085923ea1d8c13f30af131127e87e1","sha1":"c8407eebb5bbcbf82740e6e474aca8f1f039696b","sha256":"9c4f5c9ad6e142c77cc9416ebcdb3a95be0d99789b75905beece39abafdfdddf","sha512":"c47719a5f7485cf8a204c1308887a999e6e08bd9f659b42a6a90c4bee03bd2ca4b7b4cdcf97780f1be51678b8499b13aef54d16819164640c4e1ecb22851ab0b","ssdeep":"","tlshash":"a1d05e6958b3a0dd5727e06926ee51162466643b6486ca003d2f93069f482b62356aac","size":278,"data":"","first_seen":"2026-10-13T06:56:46.815845Z","last_seen":"2026-10-13T06:56:46.815845Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"125939c6f4984905313dd7a1733e30e3","sha1":"8c91e91dd209badcf203ebf4642e39fb575c7532","sha256":"06c68285e3ca4d4c01d18b94e7a9286caee94acf7f8ba5a4d73c40a60bbd2bc4","sha512":"6aa20c6961062c2fbc62ed90cad031f01e943fcd388a35fa2a10abae649637525d998f5cc729da9d30b45f631d475248d58db40c5257454121b432bf0009d75a","ssdeep":"","tlshash":"d5b0120cb6f620401277f031477f9208207b20cba009ce123a1d13c02f1117d220bdac","size":121,"data":"","first_seen":"2026-07-13T08:00:33.486282Z","last_seen":"2026-10-13T06:56:46.818402Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.26.24/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","size":79991,"data":"","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-10-13T06:56:46.785331Z","times_seen":2859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75T6DW82TB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c57ba78d01adefe39ea4d746660b51d","sha1":"c1b37b82ed5a9d534f0ce0587bd8776805d3ba32","sha256":"c44f4403abbc1a6503550fc913a8c664555a9352da3cde3ca5d4e0366a904ecc","sha512":"a06c75462d79d410f2d7fee88e182df5a95b19a0f88d71b3fffb9fd2454ba08d12a3fd8c3be71467c013f095d5de53871919d91ee0afe274a228b43cfabe7c57","ssdeep":"6144:fElFzGbRGE6v/tfRrBHWShclVbEEwF37w1GGXL1XUU9DC:zz0ZYVZXUx","tlshash":"53b4f9ceb3c6746253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","size":533872,"data":"","first_seen":"2026-10-13T06:56:46.797311Z","last_seen":"2026-10-13T06:56:46.797311Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M6PBM3QQDB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d3d0d7dad92acef9cffa488f3464f5c","sha1":"f4b8640548407fd7a77938d63e361890b6e469a8","sha256":"1bde598daae4ecedf33cc0fdd1012740e2e8f992b9a5ecc3c1a4f370b309785e","sha512":"2eb894d9f7f12e5ef7a9435ef3869a3d3aa1fdd9db14f8fba4c88fca166b52b273a707fc699179d922025bfede9f4b83c0adcdc63bdd2016e0e92ee2055fc8e9","ssdeep":"6144:xplFzGbRGE6v/tfRrBHWShclVbEEwF37w1GGXL1XUU9DC:az0ZYVZXUx","tlshash":"4db4f9ceb3c6746253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","size":533872,"data":"","first_seen":"2026-10-13T06:56:46.812062Z","last_seen":"2026-10-13T06:56:46.812062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/utils/tools.v2.js?_t=1786521579","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4c7de5417d1602ab58a8e711498399b","sha1":"807bed238bc4105d7b0a16dbeaf95ba2a22c8054","sha256":"11158d94df134c527f90a16ab26182d8ba103417241e14df555e9293243f641e","sha512":"7c78fa893945666cdc795f8e9c9c6012d6feba865d33979bbdd3d6a571d1958c17f90ee7fc9f6220a64b360a3600f1d50224b17e05d015ab728f6022148569e6","ssdeep":"96:1ShHbPWOD5WEj6st3y4lJEsqx6fqp8umhxm3Mk5HuR:1eHbncEj6stiS6sqx6fqpRmhx+Mk5HY","tlshash":"28a17650b1c2d01cafd4199e9444cc22b6256e43788cd2f3d947cc86ed96e8a71bdf4b","size":4815,"data":"","first_seen":"2026-07-13T08:00:33.473832Z","last_seen":"2026-10-13T06:56:46.802379Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/v3/14/app.js?_t=1786521579","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a48c65109cea5c96bd7e334d648147","sha1":"681f60f84fe4d4a3dd805e382183a9b391d45ea9","sha256":"ba3db214931d5f1fdca085dc753f4f0cb3fc8050dd83b9610512615dd61e8a01","sha512":"37a0f2513acd7546dcab1fcf89fd5aaeb3cbee4adab015e90f07fd7a97251fcdf501d1fbb440e9a63ddf3a0ab814d350abc3ed5c06f8e2877d50fe679e21112f","ssdeep":"3072:cK+0vNKnXVZ1BcBsWRXKNNU1P25Yy6ddzaN1htJpcE2VYbvwryUBFW:c6v8nXVaRXWNOP6Yy6nmN1HJpR2VYkrC","tlshash":"31f329165181a83052328eae02af20c0f0d875e97d1bdbdc777ce8bd2f9379160b7a65","size":158987,"data":"","first_seen":"2026-09-29T00:38:09.214625Z","last_seen":"2026-10-13T06:56:46.810286Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/index.js","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5e93f2426a02820dea7b50a3670b2b0","sha1":"0fa8581cece94d8d04905858b7fe56a94996fba9","sha256":"80e2a301db19be9576f4130b3529c0ed15b62294f68f13eaeeff230b6a4de600","sha512":"31b656ccca86c797600ae9994c0e73fbd0f695fa8533db40a8d09c0fbabda4413377312c7340add64661b3ad3498d0a85b20158bac17d1ad01337119941c78da","ssdeep":"768:JPvJjLpZ1dB6Sk+UXP4mQbDC6pWc1PY45xsOne6PkfKHM69UEP9piqa3Gy/kgmuD:/tTxRFCF9XvLcRQHywPIraHj3cjeJ","tlshash":"2a4308f83183b57293e908e6407b0406f36e2955384dc898b1acaedb3d7644651bbfbd","size":58876,"data":"","first_seen":"2026-04-18T23:34:40.846458Z","last_seen":"2026-10-13T06:56:46.813772Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnwix.com/upload/52070e1f596026cf75d265b33a6415e9.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.950Z","timestamp":1791874562950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/52070e1f596026cf75d265b33a6415e9.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9bfEcY6NfsHb4GV8HVDkSsZDfj0eDHK4C8r6RRfAkkFWcHN_5ZizfSkZzkSEiThLNba4UzRKQ\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:26 GMT\r\netag: \"88b5509e55f17c72ccc64f4b290bd24f\"\r\nx-goog-generation: 1784005046250960\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 19290\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005029531168\r\nx-goog-hash: crc32c=mB/5fA==, md5=iLVQnlXxfHLMxk9LKQvSTw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTQrPIVVm35CR87iBmnT%2FWXNTFYhF%2BemMbWOcVrspZA2OjHdoSI%2BSaKB25HgdfEGGYfaBKRwZk%2Ft2lAPiQHyQ0vAE7WAS%2BDrdCF01awWAtEcmZF2hVsdUGUNDI2S\"}]}\r\ncf-ray: a49c71329ca076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":19290,"size_decoded":20458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"88b5509e55f17c72ccc64f4b290bd24f","sha1":"e001089efad813b4e115f619ee747025c9f3a43e","sha256":"241ebb0a5265d15799bdbbe1055864869bea359f9f44aac5404a3ae270d4b6d1","sha512":"5e4f5073934717292573ca325e730bff99196b3929de84bd4a7c588f8a22f0d9604e7432011ee11c57b681fd36964cf1c5e043005319f60310c3565b6453ca80","ssdeep":"384:xw30D/L/+VhK470M+FDdPpqdo7BodQd+eL5YPYyD:OaL/+VhKDMwJRVSu+eL5aY6","tlshash":"4982d0f433e42bccf4522fb23986b11ab872680a45cfad905fc533d68723d4a13d2125","first_seen":"2026-09-08T03:02:32.423637Z","last_seen":"2026-10-13T06:56:46.780846Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.26.24/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:01.509Z","timestamp":1791874561509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@11.26.24/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.24\r\nx-jsd-version-type: version\r\netag: W/\"13877-yvQx6m3IVnvgENB/T31XmBY4Id4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 13 Oct 2026 06:56:01 GMT\r\nage: 1677066\r\nx-served-by: cache-fra-eddf8230036-FRA, cache-bma-essb1270057-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79991,"size_decoded":22216,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49001)","md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-10-13T06:56:46.785331Z","times_seen":2859,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tanmi.net/doCmluZG95eWh0ZjMPDw8PDw8PDw8PDw8PDw8.gif?ts=1791874562762","fqdn":"img.tanmi.net","domain":"tanmi.net","tld":"net"},"ip":{"addr":"172.67.150.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.764Z","timestamp":1791874562764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tanmi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 07:25:02 GMT","end":"Sat, 28 Nov 2026 08:22:32 GMT"},"fingerprint":{"sha1":"B4:69:86:F6:E7:89:AF:E1:89:DA:B9:22:20:8B:42:A8:C9:B2:69:DE","sha256":"B6:A4:3E:65:26:93:E0:1E:44:B8:D5:EA:0C:4C:3E:2E:9F:6A:7E:32:BC:86:B8:BF:12:E8:CB:5A:A5:C8:77:8C"}}},"request":{"raw":"GET /doCmluZG95eWh0ZjMPDw8PDw8PDw8PDw8PDw8.gif?ts=1791874562762 HTTP/1.1\r\nHost: img.tanmi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1ThCNHfm34eoimmuErONJKfi05sWywnw7Vvdnq3zZvjSHwqGXAAciDCJ%2BJ1PoG94RjmkiAVbPBrH0zc%2BKaq2k8dIJ2uUAq8kSwy0QiasT%2BW%2B7rmezJFpXvjTjvmNR0M\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c71317f4856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":700,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"a82ba3a9d42148e9cf209df13d8c3f3d","sha1":"dba80835d31175bdcf0bcad1abafefb06d86e304","sha256":"1e85ec81b9800b4c443d39caca0d0926089a3ac201120db1ceb45b93789480b8","sha512":"97777a4b16bedd7547a46b1ab1d146c50c1547bbe23c70708806a357352a1291a4eb6cdae049d0e334f33903dbc98d7054eb5bff84dab0edcd091241ebbe5353","ssdeep":"","tlshash":"d9800023b2a08880c2cac0300c0aab802baaa0200a20230fb0ac038c2c3a3b02c02000","first_seen":"2023-04-19T02:04:42Z","last_seen":"2026-10-13T06:56:46.78675Z","times_seen":8848,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":13,"connect":19,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/zz.png","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"104.21.23.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.938Z","timestamp":1791874562938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 16:30:47 GMT","end":"Tue, 01 Dec 2026 17:30:34 GMT"},"fingerprint":{"sha1":"7C:7A:95:04:C7:2C:20:91:C8:D7:03:8B:66:E1:95:0C:D3:89:E5:E6","sha256":"D3:C4:9F:CA:1C:4F:97:4D:9A:34:16:82:1E:89:AF:6E:3A:16:FE:34:1E:68:8A:65:F9:64:5F:A2:02:F3:C4:A1"}}},"request":{"raw":"GET /upload/zz.png HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1046\r\nx-guploader-uploadid: AJ5rDhHvmba64ePAJSUno5ukHXsPbPxw8Ha4Lev9bEo8DOFWJrB8pmwTLyYP2sxM6OzTvubiymnkl_0\r\nexpires: Tue, 13 Oct 2026 07:45:10 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 22 Apr 2023 14:17:05 GMT\r\netag: \"71be244525f04c73e4bc72ff1344b3de\"\r\nx-goog-generation: 1682173025272071\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1046\r\nx-goog-hash: crc32c=5GSMXg==, md5=cb4kRSXwTHPkvHL/E0Sz3g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRGDw9paDHtOkzC6u%2B%2FXPCtfOQlbI839bxGSdZp9ZHwSwgQh2iWPoVCtgzLtw1YUQDvWfJCrUkeyAYi78eKVb1zPMgII4jfmoFbvZ%2FzZ7J%2BQbhRwhYYiGpnE7NM%3D\"}]}\r\ncf-ray: a49c71329bfe56ca-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046,"size_decoded":2108,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"71be244525f04c73e4bc72ff1344b3de","sha1":"07c07013b59432effee6f4c32a2032fb026f42b4","sha256":"0557794e085aa9314081ab9428f16573879ab9b734665141e557a7c93f546c8c","sha512":"efe786f5d60789d2704345d9d7c1f107c39018be0451ac1848bc29377b75e162ad8a1f64e744700664ffedbf37411344886e67c4a690818d23f3f6e2a92ca7c6","ssdeep":"","tlshash":"4b11655ee941984296c8b5692cf720179d330c40c5e0d62af7cfc55b1c222bac9deadf","first_seen":"2023-04-30T22:49:21Z","last_seen":"2026-10-13T06:56:46.787969Z","times_seen":54,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":79,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u.jsdelivr.me/res/opengift.svg","fqdn":"u.jsdelivr.me","domain":"jsdelivr.me","tld":"me"},"ip":{"addr":"104.21.17.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.745Z","timestamp":1791874562745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Sep 2026 06:44:27 GMT","end":"Mon, 28 Dec 2026 07:43:13 GMT"},"fingerprint":{"sha1":"61:D1:9B:12:B5:B7:04:29:26:97:E4:3E:5E:6E:32:01:F8:CB:E8:0C","sha256":"40:EA:21:D7:D6:6F:BD:A0:3C:E6:60:97:DA:F3:BC:09:44:D0:74:B5:65:0A:8F:55:61:34:6E:35:1C:3D:81:76"}}},"request":{"raw":"GET /res/opengift.svg HTTP/1.1\r\nHost: u.jsdelivr.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-guploader-uploadid: AJ5rDhH4xQdUpi5kkq53tov1iKTTYAVGVkPfEi2Ym6IwZoQ6RtuZpEGj7Fo0smW1nGc_NHp-\r\nx-goog-generation: 1767166253869922\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 28713\r\nx-goog-hash: crc32c=WPN1RQ==, md5=LhjIbzAO3hyP/wBQBS+SsQ==\r\nx-goog-storage-class: STANDARD\r\netag: W/\"2e18c86f300ede1c8fff0050052f92b1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Buag25XrBwdqZSjCKpy2AiyZaVoJTVS3%2F0cuN5ElE6f9DlQQd5RThEChNyp%2FS%2BlbjcecXzYzh8Lv9rVh7J48aTPyYF4%2B0AfjZxmXFPx5%2BSnUKP7jFsxED5CF%2BP8sbwuK\"}]}\r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\nexpires: Tue, 13 Oct 2026 07:14:27 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 31 Dec 2025 07:30:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5,i\r\nage: 2495\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a49c7131abe456c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":28713,"size_decoded":4349,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e18c86f300ede1c8fff0050052f92b1","sha1":"0426dd6fd4dcb21934fce78468ba9f47753daf0d","sha256":"9eec08f75c29535eb1f17c1d58db1235b776a2dab8d8dcd1f0e2da4bd45d6ba2","sha512":"5047d591bc33b6e980fb2a51ae57b4b568a29d1f94259b8a0f7750c16d9216aa0aea788f3a57437a5dde72359c58c263919538e379394488c2588c2d6320701a","ssdeep":"192:vq+YJefU09yTn8Q2KVTn8GipN2hooipN2egLGooipN2qERPi/:viJZ09yT8Q2KVT8GipNLoipNBgXoipNP","tlshash":"12d200047902242c2a438339c3cfdef4563c9b4368772ca9b7a3315b68686ed57be65d","first_seen":"2026-02-02T13:33:26.414941Z","last_seen":"2026-10-13T06:56:46.79142Z","times_seen":46,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":66,"connect":12,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/86a7f5880cf1624910264a31607fe510.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.947Z","timestamp":1791874562947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/86a7f5880cf1624910264a31607fe510.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9abEu1ukGc0zDs8J_AzaHnU2FSWahT7IqXvCmaQCjYyMIlxgoikr-q6mFYi8rhJhN0XisR_-Q\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:26 GMT\r\netag: \"5facb1ecc07fe20e4098496fb1cdb295\"\r\nx-goog-generation: 1784005046326966\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11022\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005027958028\r\nx-goog-hash: crc32c=i4F9Pw==, md5=X6yx7MB/4g5AmElvsc2ylQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FMotkcd5Gakp7PYfPjO3exvBktSuvD%2FMhE4R4FuYPDF8QZqAXis0yYRL1EpE07E0orpGtO3hWKDqY9zi0dmU%2BSeoeCJO2ZQ8dNZWxPBhYfb4lTjxCyqHzuKx9RV\"}]}\r\ncf-ray: a49c71329ca376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11022,"size_decoded":12186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5facb1ecc07fe20e4098496fb1cdb295","sha1":"d225febc32dc2dda1a4c4a5d06f1cca924d08b39","sha256":"84d870d56a834092ada7e092aff53bf66e39ccf2ad1e6ab6bbb3ff700ce17830","sha512":"bbaa1d7510619fddc967cf983ca6fe30cb8cc4aa40be971d371e0c7e8ba62bc56640f1757f9dff096107ff2818be4ac7aa65d585f5ab38785eda874bfa56ade6","ssdeep":"192:NwKbIqkXqk1aU3GhUo202nljr64c867qPfKrYryRb8dgD45SLGMhfXt7ig:NwiI/X5o202B6jMAugD45SrfXt7t","tlshash":"db32af25a5d4767de8ed0b3bb09d03c6f7fcb1227622c41e11106546ce1709a4b6788e","first_seen":"2026-09-08T03:02:32.413921Z","last_seen":"2026-10-13T06:56:46.792895Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/8c9c3ff5bb9093a3eb89fd0da56566e4.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.955Z","timestamp":1791874562955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/8c9c3ff5bb9093a3eb89fd0da56566e4.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9YDTC2kjRalHPePaY7jU9HUgQjwJutFJYNT6kQYnC0fZvx5Ms2ia2LuN640pvCmTcZnagW60w\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:11 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:28 GMT\r\netag: \"198a582bf0aab33ee8855af6cda903b5\"\r\nx-goog-generation: 1784005047973561\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11430\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005032630389\r\nx-goog-hash: crc32c=dOylOg==, md5=GYpYK/Cqsz7ohVr2zakDtQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207951\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZO9tPhtJlgXqkipO89uytX3IyMz5farx7yLHfjJGl59r%2BeQrJAusRF69khRTAuifqawbCnJqJFKyPZGEEXa73Y%2B29eWFdaj2HBQo%2FKXOP7gl7SWeMprJUqJMVdV\"}]}\r\ncf-ray: a49c71329ca176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11430,"size_decoded":12594,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"198a582bf0aab33ee8855af6cda903b5","sha1":"5b4eb66a577ad8cff9dce97c70441b0f966a9ca2","sha256":"b9e95e90afb07d6a54c68d9127c3343fc9945f047c1958e7fe801252e59ec27c","sha512":"0e02c906fcd0d936980900d85bb7de9a587289ea1e9fa0c2fc4c28a23ffc22f352cf5aad0cdad46ba3cd1269a3ce1b3b41715330ab609faf99087d4d090ae3b4","ssdeep":"192:uwiC2pRtdAMpiCL5sEWL9q2UrUtpkG5bXaNO7SUHi9vq6+U+OCI49Nni08L5X7DO:uw0phZmI2yiL8O7SR9vqf9li06X7fCP","tlshash":"ab32c003a3bc8ba5fa662cb4610736e38d2c3d3dc6ced3245144b6252109b41ffd8ad5","first_seen":"2026-09-08T03:02:32.437674Z","last_seen":"2026-10-13T06:56:46.794075Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T06:56:00.486Z","timestamp":1791874560486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9DGns5QioNXhhWOvuBngPPMzFF5w1wmlX4B0K5OM%2FJSzjs5MWhF7nz4ziGpEKv22VTb66BVnvSbWg8xOrvmLVFsRLHoqWuSetgQQu%2BNYbIfA%2BW8aDKfYcJdAL7fesDw0W%2B%2BtQ%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a49c7125ac94b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:11.26.24","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]}],"data":{"size":1495,"size_decoded":1384,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1d3a2b8a706c3a69829809106f05368b","sha1":"25734b516a7143d0c1bc38350fc21d08fffede10","sha256":"93493d5a3bf715f3351d043c834c22a0ef1fbd0b966b0625835621a7cf7f22f4","sha512":"2d529fa319486d13812b5647a32062139f6ef55c9ba7cfe108b139f56db55ba84743c05e5eab2d685912ac98e91783fa8c28ba6b4c8006a0592a3d922ee5c185","ssdeep":"","tlshash":"c1312c52adf1d84602b2a4091afbf40c5d699187f001cd843bee83994f923e55ae7cb9","first_seen":"2026-10-13T06:56:46.795116Z","last_seen":"2026-10-13T06:56:46.795116Z","times_seen":1,"resource_available":true,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":393,"connect":19,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75T6DW82TB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.925Z","timestamp":1791874562925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-75T6DW82TB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\nexpires: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179648\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533872,"size_decoded":180252,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"1c57ba78d01adefe39ea4d746660b51d","sha1":"c1b37b82ed5a9d534f0ce0587bd8776805d3ba32","sha256":"c44f4403abbc1a6503550fc913a8c664555a9352da3cde3ca5d4e0366a904ecc","sha512":"a06c75462d79d410f2d7fee88e182df5a95b19a0f88d71b3fffb9fd2454ba08d12a3fd8c3be71467c013f095d5de53871919d91ee0afe274a228b43cfabe7c57","ssdeep":"6144:fElFzGbRGE6v/tfRrBHWShclVbEEwF37w1GGXL1XUU9DC:zz0ZYVZXUx","tlshash":"53b4f9ceb3c6746253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","first_seen":"2026-10-13T06:56:46.797311Z","last_seen":"2026-10-13T06:56:46.797311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":46,"receive":49,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/8328f840823c2218ef0d53ec7573cb9c.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.944Z","timestamp":1791874562944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/8328f840823c2218ef0d53ec7573cb9c.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9YyI4E6VckCgtF6tFEnc-RHkD7O-EQw5_-2jzPkW1caao1NnmEH1OR427YYoh-JBRHgsRhAag\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:15 GMT\r\netag: \"0ccac7d655186f034d48a6f0caf625a4\"\r\nx-goog-generation: 1784005035033900\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 15532\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005025885923\r\nx-goog-hash: crc32c=PQ8Tjw==, md5=DMrH1lUYbwNNSKbwyvYlpA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TewzVVnuJ%2F75FaazU4%2FqaD0Rg3fiNc5Isjoh7ScBzGJDdver7jInMk8IssQwKGk8sg4G6IaM2vN3KekFLFJvq5okXtu%2FfgdOlQZWozxQdotV9cOn%2FJsixbxHHCN\"}]}\r\ncf-ray: a49c71329ca876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15532,"size_decoded":16698,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ccac7d655186f034d48a6f0caf625a4","sha1":"19459625559f006acc9dda14b6eacb6c0817a2c4","sha256":"30255f0e56b8950e5c45ee5a73328b008a57c066f6d355f66e1d6b709b97d1f2","sha512":"6da63ff9708c3296df6c28a8b033bf938e04e915d0f83ec2025e600fc88b34b2402d6736eaadc8e7af3cb6f1b1efdad96ec1b2981241edc14c4529ce69e1b241","ssdeep":"384:YwDOej6FQRdKLVH3pYJpYa5VO+Jm22rCigGzK5j2F:dDOm6Fll3aYa5EtXuig6K5j2F","tlshash":"6962c0a5b5045f20f539feb98244db0ff36768503b6600f705124bf5db0668e257a8ab","first_seen":"2026-09-08T03:02:32.419308Z","last_seen":"2026-10-13T06:56:46.799936Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/9305124d1285eb1abe8596c08e748e17.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.953Z","timestamp":1791874562953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/9305124d1285eb1abe8596c08e748e17.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9bDaQ6Z_ME11eOexUcJbd5zOIPcK9yEzAJkyQKqI3NWpfYr7myZFDbDZDqrgn2esIFedtPoGw\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:11 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:29 GMT\r\netag: \"9d96b4789a06edf360f302c865b1b4cf\"\r\nx-goog-generation: 1784005049764806\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 11002\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005031095905\r\nx-goog-hash: crc32c=vcGjGg==, md5=nZa0eJoG7fNg8wLIZbG0zw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207951\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rs9A0aiYygEfMOUl01%2FPjGfdovdtL66uxSLwssos1QIOp6eYWknco3vuUNu7vSHeS55xSa9u0gzCQIEzkYKU%2BDsP1%2FnSUoLqW8dBPPf41FptV9V0op6oJZRujdex\"}]}\r\ncf-ray: a49c71329ca276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":11002,"size_decoded":12166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d96b4789a06edf360f302c865b1b4cf","sha1":"f964de75ea295c3f6e26f86fc371f5966717eae1","sha256":"acfd45a0ffbdee824fa0199f34d1450027a7a609afa8265bef13715d25493938","sha512":"c12af22cb6949a214cce7ec04ed7ac888b89025a359866eb533058053f5118185a7b154c125850eb93d165d0a7d4deefc00727476f8d05101f146017df42b27b","ssdeep":"192:kwa9ocCAYoFo8ha5stz17969QvHjg7XsP3bYKC2qmEmjyfSk8Mpw4T6pgfLtPpw/:kwgmpkaOt578Cv04PI2qmEZfSk8FWfLE","tlshash":"b632ae4476e48d93f9046cfda1b98f93b3d9ba5d40261ac147b510287d40fba2798dcf","first_seen":"2026-09-08T03:02:32.433278Z","last_seen":"2026-10-13T06:56:46.80115Z","times_seen":7,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/utils/tools.v2.js?_t=1786521579","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:01.240Z","timestamp":1791874561240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /static/js/utils/tools.v2.js?_t=1786521579 HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 10:33:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuJc0ZiQVHEicgysbGDmMTpObbH4t5eEi7vvEH%2FxIofSNPn7Fv5z9dYz76yBdg5tHFZfeRNzZo54Q0Aigz0p6I46oo5gyRhqR1sCxI%2FeNaVlVRLkCRRq9VcaRB9xaQv1xjjyAw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a48e174-12cf\"\r\nexpires: Tue, 13 Oct 2026 18:56:01 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c7127bcefb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4815,"size_decoded":2664,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4815), with no line terminators","md5":"e4c7de5417d1602ab58a8e711498399b","sha1":"807bed238bc4105d7b0a16dbeaf95ba2a22c8054","sha256":"11158d94df134c527f90a16ab26182d8ba103417241e14df555e9293243f641e","sha512":"7c78fa893945666cdc795f8e9c9c6012d6feba865d33979bbdd3d6a571d1958c17f90ee7fc9f6220a64b360a3600f1d50224b17e05d015ab728f6022148569e6","ssdeep":"96:1ShHbPWOD5WEj6st3y4lJEsqx6fqp8umhxm3Mk5HuR:1eHbncEj6stiS6sqx6fqpRmhx+Mk5HY","tlshash":"28a17650b1c2d01cafd4199e9444cc22b6256e43788cd2f3d947cc86ed96e8a71bdf4b","first_seen":"2026-07-13T08:00:33.473832Z","last_seen":"2026-10-13T06:56:46.802379Z","times_seen":14,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.clickpoint.top/hm.gif?hca=1UVVFEBGXX1I33F\u0026sb=12FLVY1VOJO6N2DEYFNJEIM4K0J1RHE2\u0026pn=fth\u0026pt=v3.14\u0026ps=1\u0026_t=1791874561741","fqdn":"app.clickpoint.top","domain":"clickpoint.top","tld":"top"},"ip":{"addr":"104.21.35.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:01.752Z","timestamp":1791874561752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpoint.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:47:58 GMT","end":"Mon, 30 Nov 2026 07:46:23 GMT"},"fingerprint":{"sha1":"A5:63:37:EC:2A:BA:68:65:5B:48:84:8C:73:0F:86:7B:BC:BE:45:C1","sha256":"AE:5D:98:D3:17:45:6B:AC:73:90:E3:EB:51:3E:D1:CE:24:B7:7F:BA:CE:9E:BF:F7:93:68:DD:CE:06:68:80:69"}}},"request":{"raw":"GET /hm.gif?hca=1UVVFEBGXX1I33F\u0026sb=12FLVY1VOJO6N2DEYFNJEIM4K0J1RHE2\u0026pn=fth\u0026pt=v3.14\u0026ps=1\u0026_t=1791874561741 HTTP/1.1\r\nHost: app.clickpoint.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xP7CvVxZOEesBGNNuueKkkiZgf2dHfHa%2FDvSk4gtADdHm3A99nyRNJF4YrIr9hbBi3zvgllI13nFHWh2NToWW3FeZQXE%2Fi%2Bl0XJUetqKiOJXxczeWT272%2Be04Af8KYoQ6A%2Bb%2BOg%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: private, max-age=0, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c712b6cfa5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":703,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-13T18:42:48.216578Z","times_seen":1107093,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":55,"connect":18,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/5fb5622c57ce3e1cf0bcc55075fc2bc1.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.941Z","timestamp":1791874562941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/5fb5622c57ce3e1cf0bcc55075fc2bc1.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AP6rU83u6d1a2toL7ECLL3c1KgZ5CNqowsnYASTi4Gah47RbBpp2ryQSrhlKLh-cukMFrI27_oD5SjbG6hD3\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 13 Oct 2027 06:56:03 GMT\r\nlast-modified: Sat, 06 Jun 2026 15:27:06 GMT\r\netag: \"67819325b86c5a622a89cd0b4cb7e9af\"\r\nx-goog-generation: 1780759626038288\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76846\r\nx-goog-meta-x-goog-reserved-source-generation: 1780759609042107\r\nx-goog-hash: crc32c=gyKvpw==, md5=Z4GTJbhsWmIqic0LTLfprw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2jYU0G%2FarprPRZ2N0%2B1YXQHV%2BP9f4PhdU62TmH4P%2BOg707SWcRP1wgYAaPpkeURqiqdeyND9yHl96ORX80%2F4%2BzB9Zn41Q%2F2DW2h2pMdMVw3qN4qKBw3DeVZdeZn\"}]}\r\ncf-ray: a49c71329ca776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":76846,"size_decoded":78011,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67819325b86c5a622a89cd0b4cb7e9af","sha1":"d61f806181e09a64c8b089208a3dc4daf4b98598","sha256":"d42706ecc72e92a92f8c6c2d8ee9d1d55250a086c40c5d15db56e04e148e78cb","sha512":"4c0698d66f005c196f59b69c96e461a614af12d8ba2aa9f324ff309f429b02a817bf20d5f331e1a1117c2c93170cc920b56280ce1102dbdf1cd3dab120821d30","ssdeep":"1536:vSj+kkYS69E9RGa2XEsmAQgjwtA8VoQKn6a2TPHKCbG2aMvKGVC:aj+dea217QgRSK6bPHrC","tlshash":"2c73129099f5720eec162eff85804ec3203cdf7521ded66fb458adaf8719d80222d669","first_seen":"2026-07-13T08:00:33.422674Z","last_seen":"2026-10-13T06:56:46.804173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":181,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/9214fe919db7eaa20deefb3ca731f48c.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.942Z","timestamp":1791874562942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/9214fe919db7eaa20deefb3ca731f48c.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9b_dVw384ZuBbPNCj5PA_Q-jzPQ1EJJ6cpPKAaPkVeR5FIISjnDyC9LfwQyT6pV6MF8zxpdzw\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:19 GMT\r\netag: \"454630caaf0a3b336f83904b0100b2ea\"\r\nx-goog-generation: 1784005039206635\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 19000\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005025052209\r\nx-goog-hash: crc32c=R27sNQ==, md5=RUYwyq8KOzNvg5BLAQCy6g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZHN%2Fe%2BM3yGLuNhS8Q%2FeiVyuYPniehqctGfItrymwOfbcNfxkLdpjaCljJ6t6moMKbRqIVrakJtCM0j9RTqHst8CA3UEuHjFCmPEKTXKc4PWHiqgspZPzl5CiXWA\"}]}\r\ncf-ray: a49c71329ca476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19000,"size_decoded":20164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"454630caaf0a3b336f83904b0100b2ea","sha1":"c390eb9a596e149cffab5272124e586941c7308f","sha256":"44b3cb7daa5ee18d324548d42b4e728cfc548fad0484a434018df8a6ea20d52c","sha512":"e2d205c66dd8d18dee3569c77f2be439a7ee4ac47879f8f9ceedc46cc7aede3767d670360528278d13c7c3a45d531e40bf698d187407b3c2731b96c597ac07ba","ssdeep":"384:CwL/Tm5NjKZfxboKMgsPttrh6xFHSzP8seFZEHEsrj3B41dWjBBMh8sOGl:zLGEZlozltrh6xFGreTGEsXyOOwGl","tlshash":"bd82d11fb31083d6f0dae67d5cae5c2cfb739b35b345080ba81e0843b656d8665d9a81","first_seen":"2026-09-08T03:02:32.41792Z","last_seen":"2026-10-13T06:56:46.806196Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/5fe884e55e0fb3d683e0945bc6989870.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.951Z","timestamp":1791874562951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/5fe884e55e0fb3d683e0945bc6989870.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9Y96ow_KoUufE_6T8Nhzy1RH3dJsbIqicur_PE8I57xCWvLfXvbXE_S8p5pVGSpkoX_zUktlA\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:27 GMT\r\netag: \"38fb5e6a958f373a15189afea1df8be9\"\r\nx-goog-generation: 1784005047374123\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12376\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005030319056\r\nx-goog-hash: crc32c=g6+UIg==, md5=OPteapWPNzoVGJr+od+L6Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcuFSPz7LloQFDpE%2BQryc%2FOzwijANmJt96odWSf8mCum97NbarL%2BHOMM%2F%2BEnbg%2BSzpuFBLI2Um6rLvl9y66Ze9V8QJzJHmMSjHocbJguRaWLgtUevPh4XiucBLgU\"}]}\r\ncf-ray: a49c71329ca676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12376,"size_decoded":13546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38fb5e6a958f373a15189afea1df8be9","sha1":"11b79337f644ef8b1f7ac693f29ba8c5836842e9","sha256":"bb3b75872663a5a292257230ae1c8096c879f6ecbaf5495e7b72773287ade180","sha512":"0d3c9d1c3aa310441b67465b71c0c56da981ddda3d8471aacac02c913a69d9417770265dfa56159a4a516a383b97c1eb6ec33ee37df8709936840ea3d5406028","ssdeep":"384:owmsCypCM2aUb30rlRCKrQZMg0ddhQ4e6CvpgPe:NmsAMGrAbhQHpR","tlshash":"2942cf756f040499fe88fcfd68fc536a4621e63b06a6e37cd7d2064e03360566226a57","first_seen":"2026-09-08T03:02:32.420664Z","last_seen":"2026-10-13T06:56:46.806847Z","times_seen":7,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/89e6f31d58298a79fffd2bd6eaaa56bc.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.954Z","timestamp":1791874562954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/89e6f31d58298a79fffd2bd6eaaa56bc.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9YYRs8OzXOgGOTmg81tBOaguJTG-wRHhS91gFLQsQITtRjSKNEZcHaLb3eGPG9z9YSW6Y8-Kg\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:11 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:25 GMT\r\netag: \"676a4848694b6ca85faab81494fb5206\"\r\nx-goog-generation: 1784005045784179\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9598\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005031862017\r\nx-goog-hash: crc32c=I0xOSQ==, md5=Z2pISGlLbKhfqrgUlPtSBg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207951\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2F7FoT8B1I8KUn17NakM2EABLbhUkNz%2FOemPFHCQZdzj6269xyOtQKPVUb5Ox9gpboEdm9hX1PgdkkjgWaqj9x6cjQ2A7th5eT%2FzTHcZFnyYKRCcWsVi2JhqFrnM\"}]}\r\ncf-ray: a49c71329ca576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9598,"size_decoded":10760,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"676a4848694b6ca85faab81494fb5206","sha1":"2d15e7cfabc06f2ca074898c065902515ea43ffb","sha256":"a16077fd2fa86be4812b751193c26cfcc6889c69bc1f90037baf98dd451d167b","sha512":"1610f7f2ff564a01f938fc6ddae2c3cd459be075a09a60ad7f9f9e9a501b66e7935c6ba7ef8dc3c0b1faf0225c011f1486a2437ded7b98b1a7035de4ed1ef846","ssdeep":"192:jwB93GzYsM4Izn8ezCmHfb/TR3L1eiM3hB1g9deupGDbDdEHBFo1s:jwTQM4Izn867fb/93L1bg69rGvBEhFoW","tlshash":"5912ae6a47043a06ff3105f45c768f1b17327deb9a06df916b851cca29000fb66682ae","first_seen":"2026-09-08T03:02:32.424934Z","last_seen":"2026-10-13T06:56:46.807444Z","times_seen":7,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/a87c99fb89d8ac67f5172a7eedcf5e41.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.940Z","timestamp":1791874562940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/a87c99fb89d8ac67f5172a7eedcf5e41.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AP6rU817vYovuCLhdjdZbco9pxbzURumx2UXcWvzNJNVCA2-YfmqJ0vyieQ5H6uH08ZHgaObxB6oFkGGCOC1\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 13 Oct 2027 06:56:03 GMT\r\nlast-modified: Sun, 24 May 2026 09:45:39 GMT\r\netag: \"2953de4860f8de699d4329733f14796c\"\r\nx-goog-generation: 1779615939144730\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 24784\r\nx-goog-meta-x-goog-reserved-source-generation: 1779615923486962\r\nx-goog-hash: crc32c=Gs2gjQ==, md5=KVPeSGD43mmdQylzPxR5bA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09N9LXShQL0wsmx%2BZxQ7AaUh8ymlDezutW%2FdqL3%2B%2BgWvPBrk17F0hLzW9Ws2x6AIcEpFVRO2X4Y4SeLg4UxsJzQnv54TJFkeG9zJw4ktjmgqwy6DwV%2BAXJg4OWh7\"}]}\r\ncf-ray: a49c71329c9d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24784\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24784,"size_decoded":25945,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2953de4860f8de699d4329733f14796c","sha1":"eadd5730c9069562532b24efe582c6b2e3db5098","sha256":"c192c5e817d4d71c2e7f980d35e66b9865b214f6cabaf12595d36ac0ea5078ad","sha512":"c596763a244edde6d91fb6e453ef91ca6652a0433081f345d27a8179debef67cf1865cad9bfe0e5758c0ecc5cbe5f3322aa7b35fded56cd639a81e2e9a347e7f","ssdeep":"768:0zAaugLViWwh5dp0iiS7ujaXr7nnJlXYISluEq9:C15ZiWwhCPS7uiHnQmE","tlshash":"92b2e0a0f59716bad123b3384be5388350c62ae5d695042f4cdd7a574fc01bd23bb396","first_seen":"2026-07-13T08:00:33.426542Z","last_seen":"2026-10-13T06:56:46.807995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":13,"connect":20,"send":0,"wait":190,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/42e9c4598613041148b6b3027262ce85.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.946Z","timestamp":1791874562946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/42e9c4598613041148b6b3027262ce85.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9YgbK1hunOPQVXrMAkCEs6aGVp606sHKN_3Hq0mPJ1O4QipgJ38oxOXhQzggrjoHgk1NOU2dg\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:28 GMT\r\netag: \"293b7a32c40585486f00cb9850be3998\"\r\nx-goog-generation: 1784005048542327\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 19532\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005027171478\r\nx-goog-hash: crc32c=BzAQZg==, md5=KTt6MsQFhUhvAMuYUL45mA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kqlJFcY%2BrRrcwXve076GFMCKfXAGCTZ0UL%2FNUgFAVaobGveIf7tN5XBJQ0ImrcC7Xtd2OcD5cwFV7b%2B%2FCvnV5hQ0H%2Bb0ALof0Aqh0hziVr3eZ0LhPR6UTIRf3Rl\"}]}\r\ncf-ray: a49c71329c9e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19532,"size_decoded":20700,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"293b7a32c40585486f00cb9850be3998","sha1":"3fb16f1c1adde7c476e688851965c5de0ff50a8b","sha256":"c94d232600e1bb7b67e0ab76f23955d8d471da7492a7344a446094a43bbacbb9","sha512":"9f47d8de4cbf8b83fee54030924328270d4b2c6dcde94d7e751d2994ca1580bfd90fb22d5356a66fa6aaae656a0dcc27bfa8d5514ddd704cd1862ec3994f478a","ssdeep":"384:owh8W26v0jmO4d/76LTu8Q3UG+BhIpjGDDWPfagTIJZW3o2T2VGzSfyCaPt0:Nhg6sjmOO/7ou8enuOrPi3ZW42aUzNvO","tlshash":"0292e07a4a56e8aec021b0f95dc76ae3b7313b0e848c3926ce513b05a73069e4dc5f57","first_seen":"2026-09-08T03:02:32.431387Z","last_seen":"2026-10-13T06:56:46.809142Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnwix.com/upload/dd3925b2a2e2cb383a6f1df121917f07.webp","fqdn":"cdnwix.com","domain":"cdnwix.com","tld":"com"},"ip":{"addr":"104.21.9.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.948Z","timestamp":1791874562948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnwix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 11:34:03 GMT","end":"Tue, 29 Dec 2026 12:32:49 GMT"},"fingerprint":{"sha1":"9E:22:1C:A2:93:17:3B:EB:F6:EA:79:F5:44:04:AB:F9:6D:E9:29:3C","sha256":"63:3A:78:98:BF:5A:E3:DA:48:58:4F:21:1B:6B:FD:9E:57:B7:15:9F:51:B7:78:03:E1:53:F1:5C:CD:15:A4:17"}}},"request":{"raw":"GET /upload/dd3925b2a2e2cb383a6f1df121917f07.webp HTTP/1.1\r\nHost: cdnwix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/webp\r\nx-guploader-uploadid: AJjja9bZMzmKFt4MQ-CfaYyJo39HY0g09s5dV1eS0L-49lp8vMsfXgYdrnYSD1o-3R6VZmtEpBpIug\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 06 Sep 2027 03:50:10 GMT\r\nlast-modified: Tue, 14 Jul 2026 04:57:26 GMT\r\netag: \"fff82dce6f3b90e92a73e471772f6098\"\r\nx-goog-generation: 1784005046132061\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9894\r\nx-goog-meta-x-goog-reserved-source-generation: 1784005028716720\r\nx-goog-hash: crc32c=/ZrMPg==, md5=//gtzm87kOkqc+Rxdy9gmA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nage: 3207952\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2BdXex%2FcnC4N6sgoGMFXCtLW8cdvotW843QqttDdI5zyV5HhfvYrgoCOSSWb2hS0Nquc0n9fu%2FO0PeI2wkfbjQ5wulmo09bjWiCkB63EC0SSkN4d7lSG4eslYuLN\"}]}\r\ncf-ray: a49c71329c9f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9894\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":9894,"size_decoded":11056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fff82dce6f3b90e92a73e471772f6098","sha1":"551caf5c4bf59e6fe54c23149aac04080156fd47","sha256":"c89a14413c21d3d3c57ced07602b878244d746b17f3d8ecd09f562f766947274","sha512":"d7517bb779aeed0dff5b2565e10fd31891eea034ae1224f143cd62513c050c5c1a706f2ba0c3cd1e8d3539000d86c190c57cc66c82bd2a62ec4aaf9823d51ee5","ssdeep":"192:kwwtBDEUDNhUkiTNBE775GoKutg5AHfHCg4akNeasTR+2LF:kw29QVTI7PDtg5AHIEasTR+2x","tlshash":"9b12af9417051f98fec562717ed572818b183bafd26a4b6dcd38a901b972ed38df0a20","first_seen":"2026-09-08T03:02:32.43639Z","last_seen":"2026-10-13T06:56:46.809686Z","times_seen":7,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/v3/14/app.js?_t=1786521579","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:01.512Z","timestamp":1791874561512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /static/js/v3/14/app.js?_t=1786521579 HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Sep 2026 07:54:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RH0yKAkgXVr5aM9b%2BO4LcZr1wfOIlWVMlit3dpGDjNYLvJuoE7Q8RcWAPqCP2QgY%2F%2FX4pQhADK%2BhDkTp8Sx0IRNyxUPRatYbn6hPVQM53HxlrH8LU5bSBNAdiUDw3DQNI8hPyg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa3b39e-26d0b\"\r\nexpires: Tue, 13 Oct 2026 18:56:01 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c71296d34b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158987,"size_decoded":68579,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b8a48c65109cea5c96bd7e334d648147","sha1":"681f60f84fe4d4a3dd805e382183a9b391d45ea9","sha256":"ba3db214931d5f1fdca085dc753f4f0cb3fc8050dd83b9610512615dd61e8a01","sha512":"37a0f2513acd7546dcab1fcf89fd5aaeb3cbee4adab015e90f07fd7a97251fcdf501d1fbb440e9a63ddf3a0ab814d350abc3ed5c06f8e2877d50fe679e21112f","ssdeep":"3072:cK+0vNKnXVZ1BcBsWRXKNNU1P25Yy6ddzaN1htJpcE2VYbvwryUBFW:c6v8nXVaRXWNOP6Yy6nmN1HJpR2VYkrC","tlshash":"31f329165181a83052328eae02af20c0f0d875e97d1bdbdc777ce8bd2f9379160b7a65","first_seen":"2026-09-29T00:38:09.214625Z","last_seen":"2026-10-13T06:56:46.810286Z","times_seen":4,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/v1/api/?appid=yjiH16s5Hq\u0026functionId=NXlu4hHIzxRFTk6xdC","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.748Z","timestamp":1791874562748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /v1/api/?appid=yjiH16s5Hq\u0026functionId=NXlu4hHIzxRFTk6xdC HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a\r\nuser-signature: 2Haxdv5gmf:FR)HIK7V\u003cfhKPR.8CKDINDiPKt\u003eNE\u003cXN\u003cg?0YdFjTdgRJQOIWCGXNP4FKUq_T.?C^)bV\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2WXxsrKJErK9hFLmGUPHgSrIJmys8dCqI09JQaPzLNNr92NM8z3Q0dj66VpOVZkV1O%2BisfKJ0LU2oV2Rhp%2BqjZF4oZn0lWCaD0uJt9n13wbbHb%2FNOPU3VYm%2FYaRBVY6yvpvDA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, User-Signature\r\nx-execution-time: 7.46ms\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a49c71312f43b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17652,"size_decoded":12597,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (17652), with no line terminators","md5":"f94e304da2c41aadb51c3484b81e70f4","sha1":"5e3c15595899a2633d0980b84ba9cab58991aa6b","sha256":"47c0f14b839b156c0c3708bce34797efe1e0aac9956e7e504d5afb95e93fb78c","sha512":"c74a5caa16686f6c443cc4811b969892323d6da7f204a8360ca545d2b296550c3ab8f14c227d4e422cb9f7ae44ab9d05e68b676496a37bb9397885145f1c7073","ssdeep":"384:+QCAysQG/6o3Zby5XvxcwtmDwfljQdSmJTml7htJRG7prgZbqEQW:+QCAysQG/6KbUXvxhoUfljqj5A1tJA7s","tlshash":"1f82aeae5bc45ac3013447bfd7d242a745bc6972e4f6e110bbe0e871f616eb8603582b","first_seen":"2026-10-13T06:56:46.810858Z","last_seen":"2026-10-13T06:56:46.810858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M6PBM3QQDB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.923Z","timestamp":1791874562923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-M6PBM3QQDB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\nexpires: Tue, 13 Oct 2026 06:56:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179657\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533872,"size_decoded":180241,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"1d3d0d7dad92acef9cffa488f3464f5c","sha1":"f4b8640548407fd7a77938d63e361890b6e469a8","sha256":"1bde598daae4ecedf33cc0fdd1012740e2e8f992b9a5ecc3c1a4f370b309785e","sha512":"2eb894d9f7f12e5ef7a9435ef3869a3d3aa1fdd9db14f8fba4c88fca166b52b273a707fc699179d922025bfede9f4b83c0adcdc63bdd2016e0e92ee2055fc8e9","ssdeep":"6144:xplFzGbRGE6v/tfRrBHWShclVbEEwF37w1GGXL1XUU9DC:az0ZYVZXUx","tlshash":"4db4f9ceb3c6746253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","first_seen":"2026-10-13T06:56:46.812062Z","last_seen":"2026-10-13T06:56:46.812062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":40,"receive":43,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.clickpoint.top/hm.gif?hca=3AVG20AYERKTQ2H\u0026sb=12FLVY1VOJO6N2DEYFNJEIM4K0J1RHE2\u0026pn=fth\u0026pt=v3.14\u0026pv=1\u0026_t=1791874562905","fqdn":"app.clickpoint.top","domain":"clickpoint.top","tld":"top"},"ip":{"addr":"104.21.35.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:02.957Z","timestamp":1791874562957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clickpoint.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 06:47:58 GMT","end":"Mon, 30 Nov 2026 07:46:23 GMT"},"fingerprint":{"sha1":"A5:63:37:EC:2A:BA:68:65:5B:48:84:8C:73:0F:86:7B:BC:BE:45:C1","sha256":"AE:5D:98:D3:17:45:6B:AC:73:90:E3:EB:51:3E:D1:CE:24:B7:7F:BA:CE:9E:BF:F7:93:68:DD:CE:06:68:80:69"}}},"request":{"raw":"GET /hm.gif?hca=3AVG20AYERKTQ2H\u0026sb=12FLVY1VOJO6N2DEYFNJEIM4K0J1RHE2\u0026pn=fth\u0026pt=v3.14\u0026pv=1\u0026_t=1791874562905 HTTP/1.1\r\nHost: app.clickpoint.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erupGnt5lLaqzuUZjxF69qZxgDSntHrEPsY0sxMdKDh%2Fk2KbHF2gZ0B5XtTr9hSF7HQZrHAfnRi9SsaUKmpDuaQjag4yLGUFd3%2BnQVvM%2F7Q2Y3sKRnN4mtmrLvo0L9JCePFWEkg%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\ncache-control: private, max-age=0, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c71327ebd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":697,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-13T18:42:48.216578Z","times_seen":1107093,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/favicon.ico","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:03.302Z","timestamp":1791874563302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:03 GMT\r\ncontent-type: image/x-icon\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 11 Jan 2025 17:24:29 GMT\r\npriority: u=6,i=?0\r\netag: \"6782a94d-0\"\r\naccept-ranges: bytes\r\nage: 498\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQ1fwZdMW2WhFqInc9tTWiJE0zrr%2F47gnWrWnVoLpercNqWzNIRFgcfAJoh6lGTdHeggTimR8cmn6ZnnGoq6We4D5EeQI3ndkLvxuKxcgbOx90TMTKaqdzUsOqBDCL7XZeQPqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c713498f0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":699,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"indomereat38th.cn/static/js/index.js","fqdn":"indomereat38th.cn","domain":"indomereat38th.cn","tld":"cn"},"ip":{"addr":"172.67.200.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a","date":"2026-10-13T06:56:01.238Z","timestamp":1791874561238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"indomereat38th.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 17:11:54 GMT","end":"Sun, 22 Nov 2026 18:11:50 GMT"},"fingerprint":{"sha1":"F2:33:46:F8:6A:DC:08:BF:60:C0:A2:5A:57:7C:5C:50:13:FC:61:ED","sha256":"08:93:13:25:16:7A:51:4E:4E:48:69:83:D4:29:E0:04:B1:E1:8F:86:3B:BF:BB:34:CF:86:67:3F:14:00:A3:6E"}}},"request":{"raw":"GET /static/js/index.js HTTP/1.1\r\nHost: indomereat38th.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indomereat38th.cn/fthwSXTjA4Y/UI6T9lTqT4HjCvPVyzkWb8e01a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 13 Oct 2026 06:56:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 09:39:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dyxS4YrweB6f7gYxwgfwKvstkJQhOzOlc6uXzV6k%2B2vQvA1jLrbGZ1YKq6wTtEfyhWEeB2FLGn%2BGGQ6YjHFRQKUd8wEtMihaCq4vMgDATUTVFutxyspIH3%2FrwANul%2B70wjfaQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69d37f44-e5fc\"\r\nexpires: Tue, 13 Oct 2026 18:56:02 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a49c7127bceeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58876,"size_decoded":24366,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58875)","md5":"a5e93f2426a02820dea7b50a3670b2b0","sha1":"0fa8581cece94d8d04905858b7fe56a94996fba9","sha256":"80e2a301db19be9576f4130b3529c0ed15b62294f68f13eaeeff230b6a4de600","sha512":"31b656ccca86c797600ae9994c0e73fbd0f695fa8533db40a8d09c0fbabda4413377312c7340add64661b3ad3498d0a85b20158bac17d1ad01337119941c78da","ssdeep":"768:JPvJjLpZ1dB6Sk+UXP4mQbDC6pWc1PY45xsOne6PkfKHM69UEP9piqa3Gy/kgmuD:/tTxRFCF9XvLcRQHywPIraHj3cjeJ","tlshash":"2a4308f83183b57293e908e6407b0406f36e2955384dc898b1acaedb3d7644651bbfbd","first_seen":"2026-04-18T23:34:40.846458Z","last_seen":"2026-10-13T06:56:46.813772Z","times_seen":39,"resource_available":true,"data":null}},"time_used":1485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1451,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"indomereat38th.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}