{"report_id":"2ce134d1-baaf-4c11-b18c-c0b15828e2a7","version":6,"status":"done","tags":[],"date":"2026-04-30T14:48:26Z","url":{"schema":"http","addr":"zdsyt.com","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"zdsyt.com/","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"title":"imtoken钱包官网app下载|最新版2025imtoken官网地址|imtoken钱包app下载|imtoken钱包官方安卓版版|imtoken官网正版-你的数字通用钱包","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zdsyt.com","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T14:48:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zdsyt.com","ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2013-02-28","domain_rank":0,"first_seen":"2018-12-16T04:37:23Z","last_seen":"2021-01-29T01:53:18Z","alert_count":57,"request_count":57,"received_data":3633275,"sent_data":64921,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.0.0","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":4,"received_data":34781,"sent_data":2128,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":18741,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zdsyt.com/22/js/colors.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4bcb8eb1c5c1dbdbeb42e43cb956b50","sha1":"c7497f9c5598d134d530e93c4e9726a09582f08e","sha256":"f9a2bcee7c369a43036cacfa650aca0a23c328c7cf0692a45ae8327a4887fecf","sha512":"0b7c628bf49b72e8339fa51cc76654202c52636a4ab95f5c2a100645aeb15be86e14e2300a33a3e9c2fe4cbbb233066b121d1b33728da53969d55319e2c1dd69","ssdeep":"","tlshash":"8d318ec5f5c2ee2fd2c7361c4837e021ac396043196a7b68fa5952fe305c31b4997706","size":1553,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.222166Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/slicknav.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"929b31107d637beba055e6eece61ae13","sha1":"7f49ba5a56674d07a498364917dad692829845ec","sha256":"7f54cd08d4c3e98ce29aba6039a5df262ff04d00139023a24af7b2fbbf05570d","sha512":"738c4217120c0c4b451f7764cbcdc999e038c1d74626bd23c70181161c9ff81e0c1f6f9c2cd24499a33f8f60e13f47e9950e4c359cc8853512efcc9415cebdf8","ssdeep":"96:e6e5ftaVYApggJKmapO684YBtzcmJycbeKkiKk4rB0KGtZYqxq3FWMrutqGcVtVm:EBt6YAUmW8PFMeRQR1Un1q3Ikuty7dW","tlshash":"e7023358b1103ab371fb7bea423b880ae233512dc50b40783963daa55d3a46d3617f7e","size":8416,"data":"","first_seen":"2023-03-07T12:03:39Z","last_seen":"2026-04-30T15:05:08.185158Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/tilt.jquery.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d47eb45a30963fc63c6f1b64140809f","sha1":"caf54abfd99fad0805223e4c957f3c932f77a042","sha256":"681592c7aa0b3f6b4ae8b925700379130ae4ca85b58098352b42d53ea54bdb05","sha512":"cc7bc4b0e294b31e65f97f0925ce2cf0ff2791cbd2e9255b2b25d8b724639e9a51aff87bcbfd1535b84db15e369fefacf279ca882cd9ed70b19044ca98f7b271","ssdeep":"96:H9HqJXyrg9+S2VcjOBnuXQNUtvUz3EvlTXTyWlyUR+Dbj65c:dH8yrAToOftvUzaXpRR+Oq","tlshash":"e9b171847211711e49cbe324d19b0f0a7236e0120822a87d75fdc9edacb9ccc027abb8","size":5318,"data":"","first_seen":"2023-03-08T04:04:04Z","last_seen":"2026-04-30T15:05:08.196351Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/niceselect.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ade90c3ec1d875d106c6119fad4cd4a","sha1":"8719da62464b15b2f946b6e5ca8c3865767a2824","sha256":"71dab99841dbf78649ecd2f0c028a40efb90f803d0b549a23a8c771d453b9f97","sha512":"e90964b6547cf694887c72c90e6cd348fd4bc017718685ce98e2909ad49087a1282d2729389a5af3f903167cc177bec149f354e6c420be977f61c197859de9a8","ssdeep":"","tlshash":"6c511114b10512f648ff24d37912b147b075493dc42ac14bb9be86b21efec02aab6d5f","size":2951,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.171744Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/bootstrap-datepicker.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","size":13776,"data":"","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-04-30T15:05:08.225297Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/steller.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"936ebb26b32b40a98965ecc09f981792","sha1":"9e39231835e0bad0dc90306fc63cc89c2095cc6f","sha256":"23e394df58ad82e7515999eb996cbc8bbdb95508f1ca93172502a1142cc807c7","sha512":"c6d5b3f2f549cb6b3bbf350ffca4c7f4e568517da329b6ecc7aaaf79be2a62e331a4133c76b83b262ca7e0ae567e68de25228caa5a50e29efb2fc974d1fc07a8","ssdeep":"384:xDZOgMai6vsyj/89dwB4leFn7KmDZNaom2P3hM5UniiF3uNuFSl:xDBi6kyT4E7KmDZNzd3hM5UniitA","tlshash":"1db24388339e252f5adf636ac4bf63c8a13de4318107817eb0fc69d9686291a5353d78","size":23756,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.236577Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"27a8f25e65bfe1872ebd62e021a0c6ca","sha1":"9f835084914c0f4403a080fb7de4abe0d210adf8","sha256":"d3a518dea876de39f9e5dc1ffcdeb6c661aee25d8a62474386b664ef3bf1b40f","sha512":"f327ef1684bc0c87ea17dacecb792b8110ac6253bc256389b66139595dffd68f54da14fb5a04b10829f89306675fcbd80f403a6a29d4d1ff3c23978803e588d8","ssdeep":"1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQr:Vxc2yji4j2uC/kcQDU8CuN","tlshash":"aa83e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86661,"data":"","first_seen":"2023-03-07T01:24:33Z","last_seen":"2026-04-30T18:07:40.817986Z","times_seen":1249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.counterup.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T16:13:05.843337Z","times_seen":9863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/bootstrap.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"43ef4106b4831ea0ee5f0d9b555e4f4f","sha1":"f5dd40f7765a63a8adb457de3f4afae2487a2149","sha256":"89648bbdcc9758f07af693fc823422a15ebdad7bad49e1643290ea085e212215","sha512":"adc01bb48e50eace3f2ce5a4b0fe10012a9ff8dc456c0321c57abb8219c99bce8fd1540a7f37d3877893dfc87b91bcd050887d4b6284269bd35790e6d0f8c2b1","ssdeep":"1536:DVvzuj0h676kEQINEsNJGVSed3SNJOMqWc/8xs62cnHuuj+J7ViUp12Wf/N:D1pgoXQpCOj","tlshash":"d893630f77f53472925bb039897f8506b236644b6a4aac187d4c51e81f2c87c52b6fbc","size":93064,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.178168Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/popper.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"499c736b389842485292bd8cd0b9b3fd","sha1":"5e8d1df55dc690485b8bcdec20b8f159402267e6","sha256":"32f81bf83cab69d72c36d23efaa3436b31b849912224330363a7b25bc508ca88","sha512":"9feebb706fed47f376156b983c8dc10435dc20d09f15a99291da1ed147a3625aaeb6fd02fe21eba60d11b77ca82df6d6431c8603f2354693b0d322ed6171f78d","ssdeep":"384:L+Xh+odHN1iZCdG9D7fWsju398xivi+7D7NYFuA1QvDHr/RxGkjkd/9jt39Din1S:SQodH7iI67fhxivbD7JgQv5xPjknZ3MI","tlshash":"4e8293dc3290b06643a790a7906f960eb2335879604e9410f29df2d97c30efa917fd79","size":19241,"data":"","first_seen":"2023-03-07T12:27:36Z","last_seen":"2026-04-30T15:05:08.216767Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.nav.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a33571eb2591514e45765696e5d92c9f","sha1":"e680863a86670bf2d8e0b1f5b33c267f0ddc5cd1","sha256":"707a967916ff7ca8411b995ff078ee44fcbb627bbb11f067643f7a6ab7f99806","sha512":"f0d71f1e292ed6641d86c37b62499b545606cb7d23954b82966b612a6cfea93d3a6ed0faf9b544cac629201e1c525ca111e25506eb49dede8edf7bad5be20bee","ssdeep":"96:zPgGS3mx/6wnpLnnUFLDM9/f2eqSzcHb+O52nzTtsqt4co0dEumHtHxb:zPgGS3S6ApbqDM9/uycaLz5nWpH5HtHZ","tlshash":"abb15d96b35e32b6c1b73515ec2f12c96a3d496bf80a102b7d386dd41cd213aa316f78","size":5138,"data":"","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-04-30T15:05:08.184016Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.scrollUp.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","size":2035,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-30T15:34:32.681405Z","times_seen":2803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery-ui.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f332a94c6195a106be1aa0b8b8191357","sha1":"5c4b695f680ed07e92e98b2baff92558a3633cf6","sha256":"ef6e1c5b887d54199482c10e4bc21e79cfd3a69cb621f9bdfab64853fac2605c","sha512":"00e36a75c55a1de41e0b3df1320f0509afa48cca8b30f001283888b2dfb89d6be33dadb558ac967ccbea94c04affb5de95300fa622f6025e88019f48b41eb857","ssdeep":"384:X5qtx0I52IBdBs8lksudYeYFF4E/5xl48noArBWTgFcOrDNHjVw1aQhPmDHhW0Eg:kj2IhdX4E/5x3rB/HrpDxfT","tlshash":"27d2a4897242bb532aeba221503f514bb33256ec9409448cb478cede1d7de48a17bf7d","size":30936,"data":"","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.235413Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/owl-carousel.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"70c2ef210f452a994b4940a01166b193","sha1":"fcc408e3583af8f92a82b1a23293b62e64de39b2","sha256":"cd675092490d9246fde62ad2e85e8cc3feb86e846253aa7a4cdb13581ede0294","sha512":"a7b58504fb60a26fa1d9819eca76bcbd5bed1c2959acf2b2d0a2b48fd371b9ce1d3bea04130ab7ec7748b5ec9b7e3a891609fb0143b08a5553374b76152e455d","ssdeep":"768:B1kKT+gdErdN+Q3f0pGY6OUDXu9qK2fhc6ZXrTh9GRKKYHsv6oONPcwccW:zkKT+pdPp1amWRKKD6ofYW","tlshash":"cb33500ab3b4182bc577b2359e6f8a0af23a052f9151985e3d7c91dc1f79414067efb8","size":54553,"data":"","first_seen":"2023-03-08T02:13:05Z","last_seen":"2026-04-30T15:05:08.236044Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.magnific-popup.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"012ea90f2b209b3f46e44186d2b81c30","sha1":"3789cd331f4f074f040852c59190be4b3407c082","sha256":"322e662b8168f295462a41ed722a0f5908f8258f1fc436500c3c30a28afac6cd","sha512":"9cb2e86d30785fa2438537639645c1badafdb907a7cdec6598790edb74279aa87897fbb957e08da1b38e791991b375029cbfcc1b57759c07ea3a5beff63a9934","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"21921894f2b2b21383a735b8686f700939729952ed06c855a55d94d87efcec89037f3c","size":20221,"data":"","first_seen":"2023-03-07T18:40:28Z","last_seen":"2026-04-30T15:05:08.158484Z","times_seen":482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery-migrate-3.0.0.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"809b0656a1474373ca3e71d573f1b0f5","sha1":"cf29c3d8cf1ce28f65c7c1fa10b436dfaf8448cc","sha256":"a44b5727bd453959ba8f2ae37fd2359272b730ada09e80fb2a5bbffd086ef075","sha512":"fc5485c5e2d6c9263bb6828979703c9767fb1c0e2a2646acea0cc138b55ab683d2a7e08ce69a6643da3027b5016b677aa8736f6bb854a3f585e2320dc522ed7e","ssdeep":"96:VmJUmfLziQDbiTRJQupC+e8LzkgXQ9NxhpSXQTCF9FrgH4HQ8Ci8:VmJUmJARJQunFzkgg9NDKQ2HFP8","tlshash":"36e1b69db156b2b26ef675f8f17bc36f327544e82504d964a14ccae5342c898807af30","size":7084,"data":"","first_seen":"2023-03-07T12:29:40Z","last_seen":"2026-04-30T15:53:21.864889Z","times_seen":469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/easing.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f685389e590926655414053cda81bbd","sha1":"a87af32cdb666e04a9ccec116017296caf3cc370","sha256":"66b9ac191fdd35283338f027457f05f78609b775dac147ee4ce9e2084b86f617","sha512":"94aeff2e944364ca3a2ec3de8858efde8c7c437c91471ddda5616f8a1e761f9c24813fba9bbf08ff216f786197ce9cd201ed5b31a12127975202f9d4812b7857","ssdeep":"","tlshash":"bd4108d9b9c3b75a934271e0162f200bb26e6eb010ed2520c661b89a7d3431d8d3becd","size":2299,"data":"","first_seen":"2023-03-08T02:13:05Z","last_seen":"2026-04-30T15:05:08.224687Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/wow.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8183,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-30T15:05:08.211245Z","times_seen":1999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/main.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"580b215f863e21c5c7fd677703c6cc6d","sha1":"ee1aee32ed6098e4b8f711a63370914d42cb53f7","sha256":"9476320dbc9b893e6653fa0973fa363d907ebb96c65f7e19942dbeeca085da41","sha512":"f7894c8fc0c799b6751461077d53d91a373d71e6364167db21d70383d9ecb23ea3c347783d5fdd8ef458a0debd079ba313c6ae7178a458997fd80d28cebafe7f","ssdeep":"96:8/OSm4MKELHJ952yd895jyAfF95j1j3RPU5l/9+2x5:yA5G55536","tlshash":"66f13140f23c75ab49ee2358a17ada00de5ec032d15177fbf1ae545c05c97c272e6e86","size":7579,"data":"","first_seen":"2023-03-12T08:28:11Z","last_seen":"2026-04-30T15:05:08.228963Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zdsyt.com/22/img/blog2.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/blog2.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46634-fd3\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:32 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 38699841742646318\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4051,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 627 x 417, 8-bit/color RGB, non-interlaced","md5":"e7dbe954990f08c7e7e7286ec69acd72","sha1":"da89c188faa8a2ac59e7294cd1724fd995923a8e","sha256":"f9ffc3088dbd8de9949e3eded474482c660d9a19d14bce4c35b5684b22f7b776","sha512":"14dc7bd3b0508133c5113097783fa5510da904d559fe68a5305d724e30238baf843f3d014a13caffcb5a847e3bc74d3dc9b1cca1ddc6c66f125a1ab7e2d72a1d","ssdeep":"","tlshash":"6781930e9e07be669042f6843b97012b5f1931644847aa815cc64fef807f27dc13ebad","first_seen":"2025-10-16T22:03:48.172024Z","last_seen":"2026-04-30T15:05:08.209245Z","times_seen":14,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.scrollUp.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery.scrollUp.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663a-7f3\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 13980011380691135494\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1872)","md5":"63bbf26c1fd78c531513dd6a4a2e4f51","sha1":"f349a84e4c1bf94aa3278bc578043b52a9ce33a2","sha256":"b7662ba99a132eafd0b7ccc8c3404c8ae442d97e7e6b73bb3ce0d4f11c28c98c","sha512":"8001cfd51233473a250294b7f8f2395240ada1e069771040b7110fb32aafb0f37de7443ba03f944f685a7eb705a05d38a2c84218ba9c4a047976152d84272374","ssdeep":"","tlshash":"f94100492385e52002de517cc06b0f4ad451e0dffe2a50fd505ceeb90b6177492ae7fa","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-04-30T15:34:32.681405Z","times_seen":2803,"resource_available":true,"data":null}},"time_used":1016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1016,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client4.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client4.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\netag: \"66c46636-2b7\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-length: 695\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 13931674869126310744\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 198 x 68, 1-bit colormap, non-interlaced","md5":"664ea88b60558a50608a1a64f445e5f5","sha1":"8c4e7d03e96f23205647435cdd6e96636ce8d040","sha256":"04d0086837d6452cb58fdf05ccdcede0a51fa803d5e87808e5e03f7341b105a5","sha512":"3bfc3ee363625abf8068fe9772899745d3b89d24298b47b6da66b63a9dbe8c1d3a2978ebb02e97fb31c5077f50b0b97d40542f27111c26f0cc0cfd13d0703a0c","ssdeep":"","tlshash":"930144a5f6294d5c6a15352350d75562402120c82a0d0882bc75fcb0dbeb871e1e055e","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.218637Z","times_seen":33,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/easing.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/easing.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663a-8fb\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 2439261360145389080\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2280), with CRLF line terminators","md5":"9f685389e590926655414053cda81bbd","sha1":"a87af32cdb666e04a9ccec116017296caf3cc370","sha256":"66b9ac191fdd35283338f027457f05f78609b775dac147ee4ce9e2084b86f617","sha512":"94aeff2e944364ca3a2ec3de8858efde8c7c437c91471ddda5616f8a1e761f9c24813fba9bbf08ff216f786197ce9cd201ed5b31a12127975202f9d4812b7857","ssdeep":"","tlshash":"bd4108d9b9c3b75a934271e0162f200bb26e6eb010ed2520c661b89a7d3431d8d3becd","first_seen":"2023-03-08T02:13:05Z","last_seen":"2026-04-30T15:05:08.224687Z","times_seen":117,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.nav.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery.nav.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-1412\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 1832\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 8136376966698204305\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a33571eb2591514e45765696e5d92c9f","sha1":"e680863a86670bf2d8e0b1f5b33c267f0ddc5cd1","sha256":"707a967916ff7ca8411b995ff078ee44fcbb627bbb11f067643f7a6ab7f99806","sha512":"f0d71f1e292ed6641d86c37b62499b545606cb7d23954b82966b612a6cfea93d3a6ed0faf9b544cac629201e1c525ca111e25506eb49dede8edf7bad5be20bee","ssdeep":"96:zPgGS3mx/6wnpLnnUFLDM9/f2eqSzcHb+O52nzTtsqt4co0dEumHtHxb:zPgGS3S6ApbqDM9/uycaLz5nWpH5HtHZ","tlshash":"abb15d96b35e32b6c1b73515ec2f12c96a3d496bf80a102b7d386dd41cd213aa316f78","first_seen":"2023-03-07T01:33:05Z","last_seen":"2026-04-30T15:05:08.184016Z","times_seen":1051,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/tilt.jquery.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/tilt.jquery.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663c-14c6\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:40 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1163365965118837509\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5318,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5318), with no line terminators","md5":"8d47eb45a30963fc63c6f1b64140809f","sha1":"caf54abfd99fad0805223e4c957f3c932f77a042","sha256":"681592c7aa0b3f6b4ae8b925700379130ae4ca85b58098352b42d53ea54bdb05","sha512":"cc7bc4b0e294b31e65f97f0925ce2cf0ff2791cbd2e9255b2b25d8b724639e9a51aff87bcbfd1535b84db15e369fefacf279ca882cd9ed70b19044ca98f7b271","ssdeep":"96:H9HqJXyrg9+S2VcjOBnuXQNUtvUz3EvlTXTyWlyUR+Dbj65c:dH8yrAToOftvUzaXpRR+Oq","tlshash":"e9b171847211711e49cbe324d19b0f0a7236e0120822a87d75fdc9edacb9ccc027abb8","first_seen":"2023-03-08T04:04:04Z","last_seen":"2026-04-30T15:05:08.196351Z","times_seen":100,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/wow.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/wow.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663c-1ff7\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:40 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 8888287440565841322\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152), with CRLF line terminators","md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-30T15:05:08.211245Z","times_seen":1999,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zdsyt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Apr 2026 18:03:56 GMT\r\nexpires: Mon, 26 Apr 2027 18:03:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 333850\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-30T18:36:48.388534Z","times_seen":316975,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":69,"dns":0,"connect":8,"send":0,"wait":9,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zdsyt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Apr 2026 15:41:30 GMT\r\nexpires: Thu, 29 Apr 2027 15:41:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 83196\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-30T18:36:16.910932Z","times_seen":224599,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":78,"dns":1,"connect":8,"send":0,"wait":10,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/pf2.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/pf2.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46638-26520\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:36 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 348030395314112040\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 912, 8-bit/color RGB, non-interlaced","md5":"32ef4854dad1e2a490c2e38bfe910185","sha1":"0dc51cc29fe20ff841e33b324a53b3b54be4f6ca","sha256":"9fe6ddb07f4903330a3b9bac102b58f7f14651fcdf06cd80b8d44beb79b9778f","sha512":"59fdacd67f93920d2167431f0f1559c9f96f92d59246a997561eed6f9715331d6716df8ee6fe6b33b8ad415a7306579b3496a2f63eb4b5b43fa1fa8fc2d49da9","ssdeep":"3072:+sk37DHyVXDgigGAl76Sb4Dil4eaml+TrBPJ2WO5u+GFkshFBILkH+CR4q:QSXdAlxDl4LmmBdOIbMkeo4q","tlshash":"cee3121fd2f9f17edae7137045199fd1a86744ee13b2000c7028e9fc6652d7aaf422a8","first_seen":"2025-10-16T22:03:48.045128Z","last_seen":"2026-04-30T15:05:08.213414Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.magnific-popup.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-4efd\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 7367\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 10208947317155820819\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20221,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20092)","md5":"012ea90f2b209b3f46e44186d2b81c30","sha1":"3789cd331f4f074f040852c59190be4b3407c082","sha256":"322e662b8168f295462a41ed722a0f5908f8258f1fc436500c3c30a28afac6cd","sha512":"9cb2e86d30785fa2438537639645c1badafdb907a7cdec6598790edb74279aa87897fbb957e08da1b38e791991b375029cbfcc1b57759c07ea3a5beff63a9934","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"21921894f2b2b21383a735b8686f700939729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T18:40:28Z","last_seen":"2026-04-30T15:05:08.158484Z","times_seen":482,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:34 GMT","end":"Wed, 01 Jul 2026 05:19:33 GMT"},"fingerprint":{"sha1":"21:64:07:B1:AB:C9:F8:BB:E3:DA:F8:1A:C2:71:8D:C1:5F:BB:C8:5F","sha256":"C9:6D:F4:6C:D4:D4:BA:AB:16:C1:57:05:B3:FD:F7:74:8C:83:CB:18:D2:21:81:4D:F6:97:96:5A:A4:4C:ED:44"}}},"request":{"raw":"GET /css?family=Poppins:200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 30 Apr 2026 14:48:05 GMT\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18055,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"29a453529e119c4b600e5441dc025466","sha1":"adc921be97f3377c639bcb2e6caca4200171b9a9","sha256":"1a47fc0cb5fccc2cb0b29e44270ebb58c885bf58b8ee04c1a6a7d47c34510c06","sha512":"ca7fe516246e97e97021ecb02daa9b97c23e56547ceeed94c4ded99c7c3945118d370f7dacf3deeeb48505d115ca2c62cd91795a8e0af4d3698449fb91fd114d","ssdeep":"192:HA6LA6+oA6jn6zn6mon6bOROmoOnN6AN6roN64E6gE6LoE6Yr6Fr6Eor6dC65C6t:HR9xqWSUq+DnLami0A0BNBOiH","tlshash":"9d827a91087be114ab871cc122cf7d36ee0ea254b854e978abfd0cd8ad97c654371b2d","first_seen":"2025-09-23T05:44:27.504844Z","last_seen":"2026-04-30T15:05:08.168414Z","times_seen":65,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":93,"dns":1,"connect":27,"send":0,"wait":48,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/font-awesome.min.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/font-awesome.min.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"66c4662e-29728\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 12208482407777272116\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169768,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eb6762f2f777852850e32cbd5c205df","sha1":"2febdcf6bd3a8149ff71a45231a3c186441183a3","sha256":"0b6b65a45cd5962ed078f88ba1545de8108e9111513d42f6abcf7c7df6b8593b","sha512":"ec26b2f7f091cb6356d10e59e99dc73b7634b17660d91930db30c0d3db3dd067b3907c7753ccfbe6a9ec0e79ee6c0e2c0c6ea94c6e82c8d63cd96e6dfe651f2a","ssdeep":"3072:fyFiS22l7pYy9xXFKuR03IsSIIQyYv4E8/1//BBBBNNzz+GrBBN3ovLYz3i6PSb0:/S225xXFYITBYv4E8/1//BBBBNNzz+GN","tlshash":"6ff3fba4d64900cd7732c80beb80b768a8aafa37c4a10e55f01f590d4df6669a3c5f7d","first_seen":"2025-10-16T22:03:47.989605Z","last_seen":"2026-04-30T15:05:08.232156Z","times_seen":14,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/icofont.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/icofont.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"66c4662e-16833\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 14309972251493621752\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92211,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65364)","md5":"04a763e989643efe28c3207bf1be9715","sha1":"2b10edbf1a91265ba12da7e535ed82e6776f380b","sha256":"2014e406a3dedb0519f9d0410d3e0ff9361f7dc39aa77e1a889b1c1a8b2f1f10","sha512":"c05b9eb7490552f4290c64e2add489a4cd6d4ee4d07382e5438875fc37badb03a9ba2f4eebd79b9701ef7299b0cb6530a94c22e87d08c84d227275413107ec78","ssdeep":"1536:cVN69xXFF7NJ0H3ZuRW5x3IE3+7IIQinB:cy9xXFKuR03IsSIIQyB","tlshash":"eb93c6a4d78a55cd7b32cc0aa385a628ec96fd33c5e10e21f01f951d18f7626a3c5b78","first_seen":"2023-06-08T23:12:24Z","last_seen":"2026-04-30T15:05:08.17513Z","times_seen":77,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/pf1.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/pf1.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:36 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46638-25d2a\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 151242\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 3951524658320562905\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154922,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1042 x 843, 8-bit/color RGB, non-interlaced","md5":"416bd4dcdc3a66a1e0f84227b2808e1a","sha1":"631e38430a24d13f07281b3f0c17871fbcdfe601","sha256":"0dafd50e1d5f2c6e42db462264c7f7b9dba6d3e6178624e3ae7c3ce615fdeb20","sha512":"928205baaf21011c46af1fd0cc0e9740e6479d2048c50c0da6983a92a78bad551dc628eda8769a20eb1ddf6ff8477380fe981fc6c859be654440a6c45698eb68","ssdeep":"3072:45eRGZUrGXCbI9CPR6CvqFS2PnTcRm8IcJ9ZxBB9UTRYez70:I8gUOCMsZ3vgnTcE8IUn/GRYezQ","tlshash":"7fe312180270f32bdfdf6a7397863f453b238017a0f52762bda92ada4541d4de4d9a88","first_seen":"2025-10-16T22:03:47.93106Z","last_seen":"2026-04-30T15:05:08.18228Z","times_seen":14,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/blog1.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/blog1.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:32 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46634-1e12\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 6170\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 6076669802102126972\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 594 x 395, 8-bit/color RGB, non-interlaced","md5":"ac54922ee0183631f602f1cd181712cf","sha1":"1a9a9d889c9322e766ef2a64a3ec437519c48888","sha256":"8816292e56d3f58c7c812070a568d8fbf66a0335fcb61e7e58316cbe22d85736","sha512":"13eacfe58f439c1c8464dc59238b03cccc8716364350b06327e9f698e2d9beda5c4ac9192f0b3cfccbca8384f490cf7eed2260b82d425bd3bd0359fce0fc34f6","ssdeep":"192:j/kn8XWqOOYQHkMYOjrclzVC0dEb/ctbL0PR5Oh2k/+z:jsn8DOOZkBO/CzVjectn++D+z","tlshash":"16f12acbd963967a801471dee6b4570a159831ddcac73a4ea0ccccd78f24a30981bc47","first_seen":"2025-10-16T22:03:48.146836Z","last_seen":"2026-04-30T15:05:08.220486Z","times_seen":14,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client2.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client2.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46636-422\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 9693693869926614878\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 140, 1-bit colormap, non-interlaced","md5":"00e649d8ab9268b95f7563841682c463","sha1":"8c328c5f781d13b0e13534a52891634daeb89d11","sha256":"be1f899b296e847e4f9ae4cb8f36dd4231a3fc95f84dc32cd9c64692ae52e69e","sha512":"a4344c6115969d96497ffe5e3a4079705fa9529d8dc01a8aa7121402090e9a2dbf0ea969527c188c633ffed540fd358bd9a9ce0bf0ef95ba0dd0ae8beaf17ba6","ssdeep":"","tlshash":"601186615922dae2451a9b8e07501da07f29944fae15a210919192b02dd1b1bc9f99e3","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.192513Z","times_seen":33,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/contact-img.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/contact-img.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46636-20769\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 13732301264529866975\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132969,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 972 x 891, 8-bit/color RGB, non-interlaced","md5":"6c9d92130490774f9490c003be3e6890","sha1":"f5fa685ef8ecd64162d6a33a29c899e4e5424914","sha256":"44e189301fb71609b3136c8fe4b2db89ef2cbc685609d715c52792c0d637140e","sha512":"c36724d1b65aca74a04394dbc0b251e028270be20a6be19dd7a4527fb2520a5b4a2fd95a42e403b55e391a290a8ddfcaee6621363c37b6f7c87816a42fd1a9a2","ssdeep":"3072:5I6RDidCt9BTuxoWVi6d4JpvsUPwNtME+w62l2k7fLfEzS5zgnVf2As:70eBTGLckWPwNuE5YufLfXZgnN2As","tlshash":"82d30248c3fbcf3edb82607006191f2b844b8efb76d19a8bcd5481a94ed8d586794376","first_seen":"2025-10-16T22:03:48.181034Z","last_seen":"2026-04-30T15:05:08.175802Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":853,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery-migrate-3.0.0.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery-migrate-3.0.0.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-1bac\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 2719\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 3616968270589388132\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6986), with CRLF line terminators","md5":"809b0656a1474373ca3e71d573f1b0f5","sha1":"cf29c3d8cf1ce28f65c7c1fa10b436dfaf8448cc","sha256":"a44b5727bd453959ba8f2ae37fd2359272b730ada09e80fb2a5bbffd086ef075","sha512":"fc5485c5e2d6c9263bb6828979703c9767fb1c0e2a2646acea0cc138b55ab683d2a7e08ce69a6643da3027b5016b677aa8736f6bb854a3f585e2320dc522ed7e","ssdeep":"96:VmJUmfLziQDbiTRJQupC+e8LzkgXQ9NxhpSXQTCF9FrgH4HQ8Ci8:VmJUmJARJQunFzkgg9NDKQ2HFP8","tlshash":"36e1b69db156b2b26ef675f8f17bc36f327544e82504d964a14ccae5342c898807af30","first_seen":"2023-03-07T12:29:40Z","last_seen":"2026-04-30T15:53:21.864889Z","times_seen":469,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client3.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client3.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\netag: \"66c46636-307\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-length: 775\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 12626142636492976838\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 173 x 68, 1-bit colormap, non-interlaced","md5":"2543f72628912e24c606a7cdd19215bd","sha1":"116a81fbc1f0ff5c06b18e6cf899283c997fac67","sha256":"8cf510aa695d443e6e586241afa9ab3284044badc42281257b00f6c5dfc47228","sha512":"8a3dd613f0cd6da5c059bd6d015939b82e8f2c5de385657c3be5fed6ce501d227e91036b21b8451a05b8232412fd26989a18f7703fad123e719566504951b70b","ssdeep":"","tlshash":"2801ba63e2bb5428702501af9ddccdd7c84d01e7ae205240549716f126b5c2f03b12d9","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.210352Z","times_seen":32,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/bootstrap.min.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/bootstrap.min.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-2890c\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 22260\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 16755315267207739185\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":166156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de498243de7735f3ce56cc7818a40273","sha1":"c1293b4c98b20a86aa8fa37614ecac948de91613","sha256":"f57138142beb5615f042520a2e526156271498ad47f4cbac6a65d3f8666d97c1","sha512":"6124e0459b9f1c12fba7a4fb7da2bdc7c743c55bda393eb4aa6498563268e8f7fa1aade1cac512909a1fec19b92d53d32ca8ae08716ebb679adaf92a9d9cf26d","ssdeep":"1536:DL2mB2SJ7NQG4CZksYSWQfqUn3UtusKRMQmU83i5B15bDgD0DYODC0E86tavi9FP:DtNQ01B1RWsjwYJjSY0","tlshash":"bef37416f8f22959584b806c16ec67a5637c4087c61eeeb97e5f33448f4e2c58db2e8c","first_seen":"2023-05-10T02:24:46Z","last_seen":"2026-04-30T15:05:08.200277Z","times_seen":76,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/magnific-popup.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/magnific-popup.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"66c4662e-1b27\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1293989216934881127\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"30b593b71d7672658f89bfea0ab360c9","sha1":"d6963db6faa9294387bb3175813a61bc3f859437","sha256":"45d1f5f6cf913746c45dd697b1a8f3b719c02d8b3f678dc7fc2766d54e1aaf6e","sha512":"58440dbfd777facab21e3aea519a1b0e11404590e4a36c2959d7dca6fe3896cca9b12b8c3b490719ddcc43caebb019ff41adfd5688e985d53a08c92925498357","ssdeep":"192:hRQ4fS5bzRyIy++mcS3n2s96/LEpeXHFykgxe:Alx3pSFh","tlshash":"a5e11bd39fb22305e525e9a8a657a76973120013e70fcc6bbfd12448df8d7c942a3b85","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-04-30T18:43:18.167636Z","times_seen":23174,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-15285\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 30392\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 15264346893347682627\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058), with CRLF line terminators","md5":"27a8f25e65bfe1872ebd62e021a0c6ca","sha1":"9f835084914c0f4403a080fb7de4abe0d210adf8","sha256":"d3a518dea876de39f9e5dc1ffcdeb6c661aee25d8a62474386b664ef3bf1b40f","sha512":"f327ef1684bc0c87ea17dacecb792b8110ac6253bc256389b66139595dffd68f54da14fb5a04b10829f89306675fcbd80f403a6a29d4d1ff3c23978803e588d8","ssdeep":"1536:TNhEyjjTikEJO4edXXe9J578go6MWX2xkjde4c4j2ll2AckaXE46n15HZ+FhFcQr:Vxc2yji4j2uC/kcQDU8CuN","tlshash":"aa83e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:24:33Z","last_seen":"2026-04-30T18:07:40.817986Z","times_seen":1249,"resource_available":true,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/bootstrap-datepicker.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/bootstrap-datepicker.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-35d0\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 3999\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 7463821994704603533\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"07a4d1f88e9f34025a0edb96772e1279","sha1":"1145806572c76f0caf59c02d5a149b44bbf58117","sha256":"ae347ee42d024b9dac0e2afcd6ecb5cc73f2e2764bcd719ae0d87b46384890e2","sha512":"fb5044b4e5da4a7718296a61d44a94fe3c4334b45eecdaedfa61a1798d5d3a0f3bf24839b358728547864ee4c47794c174d600ba0414cc85dc01373f49a91965","ssdeep":"384:V9f4oaMoFDKFd0YOi6f6S6PTPeAphx+hh1:V9gmoFDZLi3l69P1","tlshash":"025242d9e39d1547927220695c1d12cb563d807bdc068d7fbc6c41e168acf2962acff8","first_seen":"2023-03-07T13:56:49Z","last_seen":"2026-04-30T15:05:08.225297Z","times_seen":338,"resource_available":true,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery.counterup.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery.counterup.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-42b\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 577\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 12945556350377599566\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-30T16:13:05.843337Z","times_seen":9863,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/style.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/style.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-13eb9\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 13042\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 8980363277391284386\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bbf5ecaa94787416208b69fba5e77737","sha1":"c1914e48ee35d05799310b8a19adfc193b4eca49","sha256":"55aeeda6fd15ae6ec4029aa15e159462ac4752b3c8f2c14d4b44b43bb05d4252","sha512":"1da595b343587ed07cc33ba91e2922c44ba0e26b795c9441eeb8203686b6e7fd66d6fd175d34e606c0930584388b1e9087852dfb9c281cc8d1064645b93de8b6","ssdeep":"1536:iDIuPiKeRUcciHamctPcWPiO2O0+3uSvp7E52hQ5nCCkE+ZGut7gm:CINWV2O0+eSvp7E56Q5nCCkE+ZGut7gm","tlshash":"0c83716b77162849a117e1b8afd52b88272f5003fd0f5daab568746cd3c87c861b3b0d","first_seen":"2024-05-04T03:57:51Z","last_seen":"2026-04-30T15:05:08.223776Z","times_seen":35,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/logo.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/logo.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"66c46636-1c6e\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-length: 7278\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 5622837616982226951\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7278,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 259 x 88, 8-bit/color RGB, non-interlaced","md5":"ef11bb29c5d26ddf9e7971bbaae0dce4","sha1":"219cb28c030f1044537f90790a22469ee6a33062","sha256":"d819dede5825384e4b6ba6fb531cecb575587d374028cf70b90adcdde3386c5b","sha512":"b6ac3f4c6dadd03096efc99e2e538fa965d47641d0e372cf142ddffa1ac7f30713b8c831b5593ee1b0d1d4d293d57ef87a47159147d2480727ebc618a5f60107","ssdeep":"192:3NW/205UPa/tYUej5eLMZ5WPWoML/7pVEIuU24Kq9:E/2GeleLMCPWFLVVLKq9","tlshash":"e9e19ee7fd629bfbe32fc4247929357d02e5ef70a098d6990d06a1bd175208c4c87a27","first_seen":"2025-10-16T22:03:48.024077Z","last_seen":"2026-04-30T15:05:08.203003Z","times_seen":14,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/bootstrap.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/bootstrap.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-16b88\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 16072\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1779137020573452626\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93064,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"43ef4106b4831ea0ee5f0d9b555e4f4f","sha1":"f5dd40f7765a63a8adb457de3f4afae2487a2149","sha256":"89648bbdcc9758f07af693fc823422a15ebdad7bad49e1643290ea085e212215","sha512":"adc01bb48e50eace3f2ce5a4b0fe10012a9ff8dc456c0321c57abb8219c99bce8fd1540a7f37d3877893dfc87b91bcd050887d4b6284269bd35790e6d0f8c2b1","ssdeep":"1536:DVvzuj0h676kEQINEsNJGVSed3SNJOMqWc/8xs62cnHuuj+J7ViUp12Wf/N:D1pgoXQpCOj","tlshash":"d893630f77f53472925bb039897f8506b236644b6a4aac187d4c51e81f2c87c52b6fbc","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.178168Z","times_seen":213,"resource_available":true,"data":null}},"time_used":1059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/slicknav.min.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/slicknav.min.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"66c4662e-8bf\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 11664572380955851861\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2144), with CRLF line terminators","md5":"e01faf16e54ac80df4426716bff02faa","sha1":"c9a8a3cdeba8673dc0f10503a4d306b34c21734f","sha256":"dac904030ac75e2b11cd5a1216504dcbe1a4668832715fee245cb4bf217ce46c","sha512":"901bfbcfe2ca527040ade38493946ede82fa7c60e050830803fd26ebd5ed7bcff3632db1327a14168d30a70b541174a5cba80f4be2238c8362783ef63f97e2f6","ssdeep":"","tlshash":"4e41bb7695ec0144613ad2256fc4e2cbe4d7310388720a89f999b6b2c7be06d7ce1db4","first_seen":"2023-05-10T02:24:46Z","last_seen":"2026-04-30T15:05:08.178895Z","times_seen":83,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/font-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:28 GMT\r\netag: \"66c46630-12d68\"\r\nserver: nginx\r\ncontent-type: font/woff2\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 8535108525991145860\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-30T18:35:44.551145Z","times_seen":445972,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/normalize.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/normalize.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-4fc9\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 4832\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 15792326223947533891\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c8fd2f0479189b03511429d7bffd3ec0","sha1":"4ccae7763d096cab993799fb399756b49eeddbd3","sha256":"e5284927d7cbf9327cf48168a95bfee0a4094f28668ede1572c81312fd8225cc","sha512":"c24453af1f537ec35de0d2555158573ad8ef85869d0477508042096e9f1e97479e24bb2c674cb6722a2c80a4e439b23fa8cf1c9319002ed213b824ffb2994e14","ssdeep":"384:0LE+gZHnjVafw2mWd8hXhbf+8pkjlJkDONwvT1u:0ILZHnjVafw2mWd8hXhb28pkjlJkDON/","tlshash":"f492a8b11e502804d22bc279afc95f14cb1c81139d0fdd9eb18d646cdb8679862efb8e","first_seen":"2024-05-04T03:57:51Z","last_seen":"2026-04-30T15:05:08.19388Z","times_seen":44,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/blog3.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/blog3.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46636-18e2\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 589508148022955072\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 651 x 433, 8-bit/color RGB, non-interlaced","md5":"4609d515dbacfde23a2b91d1def9e176","sha1":"a88a5de7b6a6749ac4774113c7fc517cfeccd3f2","sha256":"2e641590ce4f53e5c2b5f6563cbc1bd840e19e3dd8f40ec7884a0d1c8bd81bf5","sha512":"854ff8d7916c601b2aed77d31949a50a64692ba7d62f7998f57bbb275abf176ef5e778f71759ddaf835062711b73a791ec8a14ffb7444c2ffe8c7b7acb2fe2c3","ssdeep":"96:NknmWIYs65SmyH3segkRzEiPrfV2W4ZSVNXrb6VcRHQ8EZwVtX7ipi:Nkn6XNxwiPrV2W4ZMtX+BwVtX75","tlshash":"fad1f9cb340e13b67008f7b87e66776e5a2284998da770c768f09f4b7a312dd88158c1","first_seen":"2025-10-16T22:03:47.916715Z","last_seen":"2026-04-30T15:05:08.214404Z","times_seen":14,"resource_available":false,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/owl-carousel.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/owl-carousel.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663a-d519\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1804677761295104973\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1559), with CRLF line terminators","md5":"70c2ef210f452a994b4940a01166b193","sha1":"fcc408e3583af8f92a82b1a23293b62e64de39b2","sha256":"cd675092490d9246fde62ad2e85e8cc3feb86e846253aa7a4cdb13581ede0294","sha512":"a7b58504fb60a26fa1d9819eca76bcbd5bed1c2959acf2b2d0a2b48fd371b9ce1d3bea04130ab7ec7748b5ec9b7e3a891609fb0143b08a5553374b76152e455d","ssdeep":"768:B1kKT+gdErdN+Q3f0pGY6OUDXu9qK2fhc6ZXrTh9GRKKYHsv6oONPcwccW:zkKT+pdPp1amWRKKD6ofYW","tlshash":"cb33500ab3b4182bc577b2359e6f8a0af23a052f9151985e3d7c91dc1f79414067efb8","first_seen":"2023-03-08T02:13:05Z","last_seen":"2026-04-30T15:05:08.236044Z","times_seen":99,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/owl-carousel.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/owl-carousel.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-17ea\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 1472\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 15214678856267585279\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6122,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e2f0f284c83e2ee6ec6a79dd0e0b552c","sha1":"0540d73e19f33209cadfb9598675d0ef5f809d58","sha256":"8f5362d7905b03bfb9dac5f00f5d49a24272a4de49538210f8015449d2b38701","sha512":"eaed6961fe577b9d594d140b68ce9fc048fccf199c7ba65a9afe9f94522040f00dfafa4a47aababf609815b430c0092b314c1682e5ca2968f09648d5a9c2761c","ssdeep":"96:E7nAYI/n6W3VhwmIexMx+q+ATjFG1ovtc0:E7nA1/n6IVhwmwPT8x0","tlshash":"dbc143ec1315114d60378bb41b9d9616be3d94b2ee02049cb9ef570283aee4c902ff6b","first_seen":"2023-05-12T03:49:41Z","last_seen":"2026-04-30T15:05:08.226048Z","times_seen":71,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/main.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/main.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663a-1d9b\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 12218563719383831617\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"580b215f863e21c5c7fd677703c6cc6d","sha1":"ee1aee32ed6098e4b8f711a63370914d42cb53f7","sha256":"9476320dbc9b893e6653fa0973fa363d907ebb96c65f7e19942dbeeca085da41","sha512":"f7894c8fc0c799b6751461077d53d91a373d71e6364167db21d70383d9ecb23ea3c347783d5fdd8ef458a0debd079ba313c6ae7178a458997fd80d28cebafe7f","ssdeep":"96:8/OSm4MKELHJ952yd895jyAfF95j1j3RPU5l/9+2x5:yA5G55536","tlshash":"66f13140f23c75ab49ee2358a17ada00de5ec032d15177fbf1ae545c05c97c272e6e86","first_seen":"2023-03-12T08:28:11Z","last_seen":"2026-04-30T15:05:08.228963Z","times_seen":48,"resource_available":true,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/fonts/icofont.woff2","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/fonts/icofont.woff2 HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/css/icofont.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: font/woff2\r\netag: \"66c46632-8350c\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:30 GMT\r\ncontent-length: 537868\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 9140968484440402044\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":537868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 537868, version 1.0","md5":"50a4ab76e700a83e649be213f820fbbd","sha1":"28ad9e9ac82f86c50eb4dd3d713a0698473bdbb3","sha256":"242e542871bd77c8ff6375418e349ef6b3a32a208e15ca1441166641d212a6a1","sha512":"e698f438120cecf681411fa628412d1130e02637c6f76831db8d9c26ea1f4993eea86ce8d4c3477a63229f98fc23d53106158a4f6e70bcc8e61a7d154bdc4ae4","ssdeep":"12288:4Y98HRgVm/SfjXnb1lAPe0RUHw530XniGHpd2J+fCxN8GzOgqWcd1pIU4:39Y+jXb1ePeCcXisd2of6iRI7","tlshash":"c1b423e10192499e2ca4825ced35afa481e7cff938bb73616f97dfd0549972a84800df","first_seen":"2023-04-14T08:39:51Z","last_seen":"2026-04-30T18:47:28.852017Z","times_seen":5572,"resource_available":false,"data":null}},"time_used":1470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":724,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zdsyt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 11:17:27 GMT\r\nexpires: Fri, 30 Apr 2027 11:17:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 12639\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-30T18:36:16.900903Z","times_seen":222159,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":160,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client1.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client1.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\netag: \"66c46636-2d9\"\r\nserver: nginx\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 729\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 9572475986638752408\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 67, 1-bit colormap, non-interlaced","md5":"4d3d4678e78973ce6eb690767037d034","sha1":"cf25d8c555bb0277f4252606865d773577cec7f0","sha256":"2a7901aa5a351df0efbc77075ca9e6c098314fe81d2eb1396389cc9720110fa8","sha512":"6c758ad47c7c405f75f0aeb5f376a3635c39a59519fed16c3329c5c03ef7607628fb1c4f4a8976383fd1cb6aede6d08282a7a4a0b3e3afdf17854015228f0c67","ssdeep":"","tlshash":"c50149c1fd5d8cd54d9513e3717840e28c25b8590cd4812d4027943e19df36a9a7ab6b","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.227667Z","times_seen":33,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/jquery-ui.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/jquery-ui.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-78d8\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 8884\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 4820881547636199167\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30728), with CRLF line terminators","md5":"f332a94c6195a106be1aa0b8b8191357","sha1":"5c4b695f680ed07e92e98b2baff92558a3633cf6","sha256":"ef6e1c5b887d54199482c10e4bc21e79cfd3a69cb621f9bdfab64853fac2605c","sha512":"00e36a75c55a1de41e0b3df1320f0509afa48cca8b30f001283888b2dfb89d6be33dadb558ac967ccbea94c04affb5de95300fa622f6025e88019f48b41eb857","ssdeep":"384:X5qtx0I52IBdBs8lksudYeYFF4E/5xl48noArBWTgFcOrDNHjVw1aQhPmDHhW0Eg:kj2IhdX4E/5x3rB/HrpDxfT","tlshash":"27d2a4897242bb532aeba221503f514bb33256ec9409448cb478cede1d7de48a17bf7d","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.235413Z","times_seen":72,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/2.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/2.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:32 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46634-45274\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 273884\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 1967922076990699265\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2545 x 1001, 8-bit/color RGB, non-interlaced","md5":"a55694edeab8958ee51b8dfe7e22967f","sha1":"522e09e833abbbee6b07f9535a00c9f67cdce4f5","sha256":"447c30af5034cf7ed78a3969036f9a599fda6e0dbfa1ff14f769c2f64887ab27","sha512":"f21e8acdbfa40b76565a60ddfd19f2a01ac0b02e93931d7de995667a53c3bb7592f4ac9849a251602665987dd4290ba5219a4018da73215569f393223efbccbf","ssdeep":"6144:CgzSGTpvVYgV+Ll2va4SDW54WJokv9afCmE4HODRARjDdBN:TzSGlvVYGkj4okY04HODR0df","tlshash":"18542350497efd35decba1b45262ff17662b082e6bf58711e1b425ec25cfc18ac12ba0","first_seen":"2025-10-16T22:03:48.085717Z","last_seen":"2026-04-30T15:05:08.20546Z","times_seen":14,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/3.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/3.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:32 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46634-381da\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 218978\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 14152920023625459745\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2358 x 1078, 8-bit/color RGB, non-interlaced","md5":"18ccde757435cda0957f3343330d989e","sha1":"72a0894f2cb5a23a9de5241968b68cbddc44507a","sha256":"ed137087feeb115b33930ca3f7a1c589b365418b22a635bdb30e0509fcba71fd","sha512":"d5d579e2d6686bd8dc8cd2b9249a4e24b4bab2c44750e76fde5d893546cda23577a624e82925263de890bc331b062df97cf339dd417ab2a011ca0335f0da5d85","ssdeep":"6144:+isNgzeC+Ib9t46vOLSqPNJEcvyoLtZYwOPJfbU:rsNgtpMSyJEcHRZYwN","tlshash":"2a2412a288fcebb4ce1f513aa01a5fb37177007b92e85b1be7b5e0085ce7c51d549291","first_seen":"2025-10-16T22:03:48.158619Z","last_seen":"2026-04-30T15:05:08.16163Z","times_seen":14,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T14:48:03.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; expires=Thu, 30-Apr-2026 16:48:05 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D; expires=Thu, 30-Apr-2026 16:48:05 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: private, no-cache\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:04 GMT\r\neo-log-uuid: 16639120520310677970\r\neo-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.0.0","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53206,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1037), with LF, NEL line terminators","md5":"34cd5f004953a57fab0bfd18bed34edf","sha1":"f561af06ab8913818d0c8bfdbe84d316aba8dd54","sha256":"5e6ce1a8f1f856550ba4c66f83305b112d957d73d2eb8879cf6958a575aa74a1","sha512":"0d67616c9d996416206e3f1cda7c17dd8b606970a86d894447cc3deb1af8f6bf8324564f2c7a120b3f57237f255b131dcf7726e38e4949605dd630041bbe5a18","ssdeep":"768:sRdlXrME+WSVEafSD63424bJtLFxp+tvbmAE96rH7LZM2O+jeLccvXlC5:sRdiE+VEKwv+xmN9i7iBLvlE","tlshash":"1733512455ee6fbb11030aee34512789749fae72da3f8196f7ff05841393c88ad02566","first_seen":"2026-04-30T14:48:33.546633Z","last_seen":"2026-04-30T15:05:08.18863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2078,"timings":{"blocked":643,"dns":47,"connect":19,"send":0,"wait":792,"receive":0,"ssl":574},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/pf3.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/pf3.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46638-2aa0a\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:36 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 695974381945816932\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":174602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1115 x 876, 8-bit/color RGB, non-interlaced","md5":"179bac253724d95856f53b756b0d8789","sha1":"1380f2b41130bf5bf69d6e032b78152adb60bac7","sha256":"1bd7d4ba744e3421e782fdd4044280b9160a3a8c5a52587c72c9e9663f20d059","sha512":"7a88c7b25a70775301701abf567f7a564f47893949a38b8a5e4afe1abd9363d97b6b667b9838d20f0ccfd58f72025f7053a672f83b01bdfe34b83918b657ccca","ssdeep":"3072:0JihTK5ogc8VkLokJztGzf4D2lYVtM5EiC5UxCYZ3U/H1EJaRTQDljaqxF6fePoR:YihaoUVkLBtGTO2utMej5UxCltSahQDW","tlshash":"c3041215caadf892ce8fd071472cbb0121b928c73b48972a595370957edcee97c4871b","first_seen":"2025-10-16T22:03:48.139766Z","last_seen":"2026-04-30T15:05:08.19085Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":443,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/niceselect.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/niceselect.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663a-b87\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 17365828335300640908\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822), with CRLF line terminators","md5":"3ade90c3ec1d875d106c6119fad4cd4a","sha1":"8719da62464b15b2f946b6e5ca8c3865767a2824","sha256":"71dab99841dbf78649ecd2f0c028a40efb90f803d0b549a23a8c771d453b9f97","sha512":"e90964b6547cf694887c72c90e6cd348fd4bc017718685ce98e2909ad49087a1282d2729389a5af3f903167cc177bec149f354e6c420be977f61c197859de9a8","ssdeep":"","tlshash":"6c511114b10512f648ff24d37912b147b075493dc42ac14bb9be86b21efec02aab6d5f","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.171744Z","times_seen":66,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":728,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client-bg.jpg","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client-bg.jpg HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\netag: W/\"66c46636-5182\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 9967167183055431002\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20866,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1600x283, components 3","md5":"c95d6979fe10ffe28eb89f43412cac0c","sha1":"cfd47b7de3560c49c0a2648c9614a7a391c78a30","sha256":"f7ea220c68a6cc76bf804a66b24dc76c1be0f59f7fa7055b66bead7dfc274661","sha512":"0cae5a952b86599f39f138b857fffc771fcbee017f4f3d9a1a80a49d6e227802119933a24fd7e222891b5fc9077fd9fb67ba2ddbf26c1858292654e28e75317b","ssdeep":"384:X1SLCTwe8IocrUSVOOlOfXQdtvAkkjjRyoDDjDg:QCTweAcwx2OfAtvAkmjRyoPg","tlshash":"2992e0d2d2f3d75ecd2d42bca34f42279d05da63a3164e0e25c8bea132791e786d0a25","first_seen":"2025-05-16T11:50:12.121023Z","last_seen":"2026-04-30T15:05:08.165238Z","times_seen":33,"resource_available":false,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":983,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/nice-select.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/nice-select.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-1056\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 1073\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 7597641583472972518\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"558ebbc393e964adfd9402f5194a7276","sha1":"05914a1c7dabee14fe3ed260813c7225fd8230e8","sha256":"6b61c3041e8815d778cc89e8f6efaeef1419cf8b7c048e1ac18979e0444cd249","sha512":"f790de8326aee0309993699b9764b32c6806f4caf51029794027b5b0014b89e669d65a94bbafc487c9687f7fee51d5a4f6d0c126f5e93276ea18dc0e7d094ada","ssdeep":"48:V03qZ9HiRIjLa/VP6n6xf6pG03IhuB33ClXF4DPJ7K9c1TkxstQ0ef+eG89G2lbA:E+CQLYS6xip4yypF82cwWiP2BnD","tlshash":"4081cc7cda025183523b8b7eabd61b18e73cc0435923156cb7d19a074fba5ac8c95f8b","first_seen":"2023-05-17T18:59:12Z","last_seen":"2026-04-30T15:05:08.212192Z","times_seen":68,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/animate.min.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/animate.min.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-4238\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 2677\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 3917823393171108190\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16952,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16755)","md5":"7da1b41592f039eecd65d604482c10e1","sha1":"e966ec2885d74306b80253ef057ea77546b2c149","sha256":"0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1","sha512":"d7e98c416ba684d035ed581279aa30fc4de291d8c15686336bca6f4df677c2ae3a50de16ca56a3b8a26f2f07f20f8ef3c063385d49772f70835707372aabee4f","ssdeep":"192:Byq6Vn0u6SBWTRNS3DW5WfW4vLYz3i6PSz/hQQHL:BV6VHTgH4vLYz3i6PSbhTr","tlshash":"46725d4c4a50105941a60773dac89fac863dcbdb68722cef3396588f4b457ee23ea617","first_seen":"2023-04-05T15:14:36Z","last_seen":"2026-04-30T15:05:08.223114Z","times_seen":2217,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/pf4.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/pf4.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46638-247d5\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:36 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1316757279446965929\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1032 x 896, 8-bit/color RGB, non-interlaced","md5":"38d67a2095c52886e5acdab58dac7f0e","sha1":"c93a62a8400247f1a43590b2a89da6d174ed689f","sha256":"aadc46eb3f2e4683c5dfbf527b750f8589d69d410c3c7f9b98f67b04ce20e785","sha512":"3ffbccbf0e40bdcd29328e390aec84b54940431cfedbdad27ae1aaca29a21bca9523a4d66647ef6629e255017389b2d3fcb62dac2dc7bb4e6bbc08ffa566c72c","ssdeep":"3072:HLD/h3U5VlokiZCaErIerpdlyqEMuj0mo9azt3gcNNGks+f2Zf:HP54utCaErPdl+0H9aBN6a2Zf","tlshash":"46e312ed4a7ed24f9c176934a832ca3e334101ae59d49355ba55f86e1f72d4c08eb322","first_seen":"2025-10-16T22:03:48.103253Z","last_seen":"2026-04-30T15:05:08.207872Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/colors.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/colors.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-611\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 268\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 9075440596742696960\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d4bcb8eb1c5c1dbdbeb42e43cb956b50","sha1":"c7497f9c5598d134d530e93c4e9726a09582f08e","sha256":"f9a2bcee7c369a43036cacfa650aca0a23c328c7cf0692a45ae8327a4887fecf","sha512":"0b7c628bf49b72e8339fa51cc76654202c52636a4ab95f5c2a100645aeb15be86e14e2300a33a3e9c2fe4cbbb233066b121d1b33728da53969d55319e2c1dd69","ssdeep":"","tlshash":"8d318ec5f5c2ee2fd2c7361c4837e021ac396043196a7b68fa5952fe305c31b4997706","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.222166Z","times_seen":61,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/1.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/1.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\netag: W/\"66c46634-51c35\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:32 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 18196797685051914383\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":334901,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2555 x 1237, 8-bit/color RGB, non-interlaced","md5":"ea5dae4608e5bf5931b42783530af492","sha1":"ee0fc4cd2999c5fdaaf30bd1a26df14cbe7221c3","sha256":"65ac776fb3bef8b5e79e707e4166c240109fce113d3f5510eae8ba5ffafc2017","sha512":"adac0d01fc0fa142b953bc0736970a4891bc721c7a2ec36519c4ec886e9fb34deb525f1c20b4a11a643201985edc535dcf1c5f56673f753de7718a1c52d9a102","ssdeep":"6144:n/5lBf4Aw7fwkzCMZh8B6YqHzOoEMkgP7Y0mOdPoHqYiog7fBGazLazaeM:nBlOAG2SM65Hzlfkgzgg75Gxap","tlshash":"3364124b59eaccd1df4b41b4c9251aaeaf77538370d04176a6b020de894bc7c2e95ecc","first_seen":"2025-10-16T22:03:47.968884Z","last_seen":"2026-04-30T15:05:08.204383Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":586,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/fun-bg.jpg","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/fun-bg.jpg HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46636-77da\"\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 30181\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 15962009165260645256\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1600x353, components 3","md5":"b703903984b4be8d35799f621c4b05b1","sha1":"b642718bd2b2a51a39e6c09bb0dfcc4e895d27a1","sha256":"d79ba64998c45b2c9ed09946acb412d62a27f37281332b44c27ab7dce7558844","sha512":"ac47b19996dc77a7d16beec05b6b32d5c65c47d494a561333be166f1b7dec0b4c052e019e3faa856af79df50d7f5af401c228e8b49c733c74bcd5bce2ec9ae32","ssdeep":"768:LkTvHmSeBCF6u2EG396EYIBXgn7dOmXJ4:oTeVi6uHGN6MBQn7dOu6","tlshash":"34d2e152d51a0e25c0605bf6ebef6ffb9276d4230f58a9cbe13815763ad12c05797023","first_seen":"2025-05-10T20:57:24.889574Z","last_seen":"2026-04-30T15:05:08.197852Z","times_seen":35,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/video-bg.jpg","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/video-bg.jpg HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:38 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663a-1baa5\"\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 101669\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 8808608308943070180\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2560x1200, components 3","md5":"5eb531544f82dce7d22dade397928f16","sha1":"1f3d5fd2b2cdf7181e961c0b04c63244d9939a06","sha256":"11c4b504ed1ebf119f6d7443ea3441462d2621c2f5c1408dbe97d63ef1495bb2","sha512":"08b5bb8e259035895fc907a9047587fad8064458d090f3c0732f8e590c2a0310943e392cac3201971f1f2d1812f4323ba637becfb5247d799b4b251a841a81e0","ssdeep":"3072:6lhV+GZjmDHLceg/V9ouele7QxLzBsjOAiHxq+:eTBuceuZQhByOAAg+","tlshash":"11b3d07aaf944866c8994f35d8973b397f7fdd70e39f021652c30d28b99a3943ca0690","first_seen":"2025-06-25T15:57:59.416949Z","last_seen":"2026-04-30T15:05:08.17291Z","times_seen":30,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/responsive.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/responsive.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4662e-5ace\"\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 3539\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 15185405633977471465\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"baf40eff97777ad7e0c93337aacea598","sha1":"e4b955e2be8a3262304e09ef7cb9ef1ae6bd864d","sha256":"d830427fdc52aad8fb1c0a46b687983beb6ef6112b60fabb80094b17766918e4","sha512":"29e9a65e0ee054b2037490392d830fefeb92ad04fcff938bedc41069d15b987a02b61b0da2d92b8624ea1e9a50cc09712e1a3e26fb8b962bceb86224fce31944","ssdeep":"384:9wk3q28yamYO8vxBsH/s55+JPNBfRNygasEViYd8vVXzshxz+0kxpGi6lzK1Bfev:NRNamyxWH/2EJagXqizVXQhxz+0kxpG3","tlshash":"d8a2e1acfbc9204d93093ab0fbf15fa5bf4c24b26e0f00aa95746619d1ca56e35653cc","first_seen":"2024-05-04T03:57:51Z","last_seen":"2026-04-30T15:05:08.219807Z","times_seen":49,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/call-bg.jpg","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/call-bg.jpg HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/22/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46636-1e557\"\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 111250\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:06 GMT\r\neo-log-uuid: 1194225358680026674\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124247,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2560x1200, components 3","md5":"22f6170b4b659f666b3e18c02d342f5e","sha1":"496c15121929f3b9904f751c660f1474105e06b5","sha256":"7763cd82dd398d3b4bc4bb8796ca5767bfab5d9477dc906a5fa2ba567ef5a836","sha512":"8f94c9e3d133e5f6ee7f337c1043f9466b0747f55038c0892f2014c1f0d59229acf26e1078cebe52ee6fd89ff31f5a7784010abb85aa5f9fbcdbee4d0251a432","ssdeep":"3072:WOc2VBCbU3uP6axj/ArD1N6wgrWDcaYW6dqWq:W4VBCbUePPxmC6oJSWq","tlshash":"49c3e0baefa44c9be4d80b3584e33b353fb7c0b653dfa24f520115344d6a396ad09a91","first_seen":"2025-05-16T11:50:12.109845Z","last_seen":"2026-04-30T15:05:08.23716Z","times_seen":32,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/favicon.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:07.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/favicon.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c46636-3954\"\r\nserver: nginx\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 14443\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:07 GMT\r\neo-log-uuid: 8256699820339873176\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9c12f3efb8c790620fbee8d9516d7923","sha1":"db6442d75098e954de6d02bfce2178e46dde6c3d","sha256":"b7063bd95daea354fbb6a74775652d5fe52e4c8c47645ae4dce2a6f7487ca936","sha512":"44b09d64ee4778b5f5f248c2e7db2a189d221b6aa516cf3cb3acbcf87aa2defb5a191bf7d9c6bfed14ad894825db39ee869b6048b174be25b4ae3b7fd8b79579","ssdeep":"384:+JXE051XKePJQQIRLQFKOikJQz7MktZ5/tmaEmoerz:+351NPkIKGI7Mkt7/tK4","tlshash":"9e62c0ab476cc94f32cfb1c78d8c4d09a57e5df821274869a2f9e7cd99035a01b214d1","first_seen":"2025-08-29T01:23:39.614884Z","last_seen":"2026-04-30T15:05:08.231585Z","times_seen":19,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/section-img.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/section-img.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\netag: \"66c46638-181\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:36 GMT\r\ncontent-length: 385\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 10033117366829357889\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 24, 4-bit colormap, non-interlaced","md5":"515cfb08a2de70c4c5713a096aed3162","sha1":"0a43712df0c85cfa20c00f9eeb3262672f1f9ed8","sha256":"6a6408d086b04534040ba0db20384e3da1a0fe1a61c37d073ff24eef9fb93da8","sha512":"fdf22f44d155c80702386fa662aeec212a8c6ae219df462d2a24742e43156185c7bf0bdd8c372d1c352c3859a75bcfe12edde8c98d190798ab96fecde8bf7626","ssdeep":"","tlshash":"c0e0c0c3f68afd50923905f5c1c80041c41a170867025f2c5419a0601be56c4b173523","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.234192Z","times_seen":41,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/img/client5.png","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/img/client5.png HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\netag: \"66c46636-2b7\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:34 GMT\r\ncontent-length: 695\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 7806028386295532538\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 69, 1-bit colormap, non-interlaced","md5":"55173413dd87e455750a68480ae02f11","sha1":"1f0af813787942eea35eb51afe31f1bceb74ac47","sha256":"af067c88b28888ebd987383251fb30ec7a6fbf714ea3607bcbc820b06170e5ec","sha512":"2a4098c64e04e295859259b435ea9f486290f0eeaebe50e9ee7eaf4def6f89bfa76ebedd1efc75a7344996c6a5e003f796f10a1e9f379f604d6a02cad0d11bcc","ssdeep":"","tlshash":"6b0194e611903cedf195812e67b361bc910013a0e600706e6804dc249a2c42cbe78416","first_seen":"2024-05-04T03:57:52Z","last_seen":"2026-04-30T15:05:08.234827Z","times_seen":33,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/slicknav.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/slicknav.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:40 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663c-20e0\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 2650\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 4832425189489279492\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8416,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8316), with CRLF line terminators","md5":"929b31107d637beba055e6eece61ae13","sha1":"7f49ba5a56674d07a498364917dad692829845ec","sha256":"7f54cd08d4c3e98ce29aba6039a5df262ff04d00139023a24af7b2fbbf05570d","sha512":"738c4217120c0c4b451f7764cbcdc999e038c1d74626bd23c70181161c9ff81e0c1f6f9c2cd24499a33f8f60e13f47e9950e4c359cc8853512efcc9415cebdf8","ssdeep":"96:e6e5ftaVYApggJKmapO684YBtzcmJycbeKkiKk4rB0KGtZYqxq3FWMrutqGcVtVm:EBt6YAUmW8PFMeRQR1Un1q3Ikuty7dW","tlshash":"e7023358b1103ab371fb7bea423b880ae233512dc50b40783963daa55d3a46d3617f7e","first_seen":"2023-03-07T12:03:39Z","last_seen":"2026-04-30T15:05:08.185158Z","times_seen":112,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/steller.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/steller.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"66c4663c-5ccc\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:40 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 3313627388035203476\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23756,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (310), with CRLF line terminators","md5":"936ebb26b32b40a98965ecc09f981792","sha1":"9e39231835e0bad0dc90306fc63cc89c2095cc6f","sha256":"23e394df58ad82e7515999eb996cbc8bbdb95508f1ca93172502a1142cc807c7","sha512":"c6d5b3f2f549cb6b3bbf350ffca4c7f4e568517da329b6ecc7aaaf79be2a62e331a4133c76b83b262ca7e0ae567e68de25228caa5a50e29efb2fc974d1fc07a8","ssdeep":"384:xDZOgMai6vsyj/89dwB4leFn7KmDZNaom2P3hM5UniiF3uNuFSl:xDBi6kyT4E7KmDZNzd3hM5UniitA","tlshash":"1db24388339e252f5adf636ac4bf63c8a13de4318107817eb0fc69d9686291a5353d78","first_seen":"2023-03-08T20:09:12Z","last_seen":"2026-04-30T15:05:08.236577Z","times_seen":72,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/css/datepicker.css","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/css/datepicker.css HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"66c4662e-ce6\"\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 20 Aug 2024 09:47:26 GMT\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 1918720881750601878\r\neo-cache-status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3302,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bf9a06e6e7eadf998acf6e20435ef747","sha1":"d7277c2be6cc381e7a03f590fa9877b00206d048","sha256":"c39aa6f1eb5cad55b57e4fffc5ea1977cf54dc6a9e138d6b30e000f373c1f28a","sha512":"9dc1341a151762f1d76d3ffe9be7985762638ffc07a0f2eaa4de5741d6e452c835138db3f9315e207cacece2380261614400802b17cd7c6cb30d62e85c67fce0","ssdeep":"","tlshash":"0b617b9d67a42c1f2933c0981810fdfb3f17608b4085da6c75e1a0584b6eed66fad5e2","first_seen":"2023-09-15T23:15:44Z","last_seen":"2026-04-30T15:05:08.169871Z","times_seen":66,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zdsyt.com/22/js/popper.min.js","fqdn":"zdsyt.com","domain":"zdsyt.com","tld":"com"},"ip":{"addr":"43.169.25.95","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:05.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zdsyt.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Thu, 16 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D6:E5:A5:F9:CB:A5:43:A6:37:03:5E:A4:2F:6B:BE:F2:41:00:60:A9","sha256":"81:BE:F0:A6:26:92:09:3C:6C:80:0D:5A:32:3E:E3:60:FC:D4:73:05:DF:74:78:B8:0E:B0:79:91:FA:36:A4:0F"}}},"request":{"raw":"GET /22/js/popper.min.js HTTP/1.1\r\nHost: zdsyt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zdsyt.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjJDS3NSblkvbmxJNU5vS1JKMXlhcVE9PSIsInZhbHVlIjoiQVpxV044RitzeWdDaEVjeFI5WWtSYnYzRTF1VlZ4bFlsMDU4amlzV2c5RE5vTkp0U0NsTHRmYStqRnA2eVZPbUo2ZE56SUdWSXhNT1laZHpiaXIyT0RFbjAySHNmbkpKWkpLd0hISVFwL2NybXpFelYwZWNsMTd2T1VGKzNscTYiLCJtYWMiOiI3ZmRkNmQ5Njk1ZjI4ODdmZGI4NzU2MDhkNWU3MDA3ZmVjYjI1OWQwM2E1NzhiYWY2N2NkMDE3MzdhNWNmM2MxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpCOWhJZkxMR2MzdVpKa05Gb1c5VkE9PSIsInZhbHVlIjoiWmJna0dHSnJzZk5pNWxSNDZwUjMyblRRS3FpRVlVR0lsUklIYjlHQjd0bHlvTGVNNDZPb1lsMURTVXBjK3NLR3hvcEdiY24vVXQrK1RsZ29QalBkdFpwaDdLMjBCUXBJZmY0Y1psQ2dpeExKQ1hKK2Q1M0ZMMEpsN2d0RUR1eVkiLCJtYWMiOiI3YmQzNWQ0MjE4N2E4ZmE2ZjRmYTcwYzkzN2FlMTY1MWQ3YmVlMTQzOTcyYWZjNTcwOGE3NTZiYzM2MWZhYWJlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 20 Aug 2024 09:47:40 GMT\r\ncontent-encoding: gzip\r\netag: W/\"66c4663c-4b29\"\r\nserver: nginx\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-length: 6950\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000,h3-Q050=\":443\"; ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43\"\r\ndate: Thu, 30 Apr 2026 14:48:05 GMT\r\neo-log-uuid: 13327421609537899137\r\neo-cache-status: RefreshHit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19063), with CRLF line terminators","md5":"499c736b389842485292bd8cd0b9b3fd","sha1":"5e8d1df55dc690485b8bcdec20b8f159402267e6","sha256":"32f81bf83cab69d72c36d23efaa3436b31b849912224330363a7b25bc508ca88","sha512":"9feebb706fed47f376156b983c8dc10435dc20d09f15a99291da1ed147a3625aaeb6fd02fe21eba60d11b77ca82df6d6431c8603f2354693b0d322ed6171f78d","ssdeep":"384:L+Xh+odHN1iZCdG9D7fWsju398xivi+7D7NYFuA1QvDHr/RxGkjkd/9jt39Din1S:SQodH7iI67fhxivbD7JgQv5xPjknZ3MI","tlshash":"4e8293dc3290b06643a790a7906f960eb2335879604e9410f29df2d97c30efa917fd79","first_seen":"2023-03-07T12:27:36Z","last_seen":"2026-04-30T15:05:08.216767Z","times_seen":270,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"zdsyt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zdsyt.com/","date":"2026-04-30T14:48:06.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://zdsyt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Apr 2026 08:22:22 GMT\r\nexpires: Fri, 30 Apr 2027 08:22:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23144\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-30T18:36:16.818388Z","times_seen":211192,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":165,"dns":1,"connect":24,"send":0,"wait":10,"receive":1,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}