{"report_id":"3878534b-1f66-4f49-914e-7bc42820b1d5","version":0,"status":"done","tags":[],"date":"2026-08-17T01:30:36Z","url":{"schema":"http","addr":"hwzb48.cc/","fqdn":"hwzb48.cc","domain":"hwzb48.cc","tld":"cc"},"ip":{"addr":"194.53.53.2","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"title":"猫咪视频官网｜中文字幕高清在线观看，每日更新","dom":{"size":1932168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64754), with no line terminators","md5":"151eb668a9b788fd6f23dec289c70f97","sha1":"b8ea848abd9f63d6b9128f19d324e5e281ba69bf","sha256":"d749f13ff3e009e8cc164eb794941f217a5c237a27ed88bc589b1e626a9d44d5","sha512":"0328c1894e1c3c7a0b15397d44503150c15d37d23b4354498e9fe023f69142091e851107bc7ed926165bd8211f6a4051bc40bcc8c83b58aab4ddc635831d93e5","ssdeep":"12288:/Dv1YjfKnR5CmsvxvvT8TlwOOfXgcjTxqLLqV+5txaeCv:s","tlshash":"7d95e1fde087f9f34b7e0e62923e6d6d0ce65d5b88741c88d3c9d8b042e80775999886","dom_hash":"domhash478311c0676b3482ffa09b6ff9e0d8fa","first_seen":"2026-08-17T01:30:49.719048Z","last_seen":"2026-08-17T01:30:49.719048Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hwzb48.cc/","fqdn":"hwzb48.cc","domain":"hwzb48.cc","tld":"cc"},"ip":{"addr":"194.53.53.2","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T01:30:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hwzb48.cc","ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":543,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"baba.jchc47.cc","ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":30,"received_data":2972306,"sent_data":16301,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"mxjsnalx.erbaiwulaoge.com","ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2020-09-17","domain_rank":0,"first_seen":"2026-04-08T10:30:12.664924Z","last_seen":"2026-04-08T10:30:12.664924Z","alert_count":0,"request_count":43,"received_data":3509636,"sent_data":21737,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"dxj4su.e36cxt7p.com","ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-09-06","domain_rank":0,"first_seen":"2026-04-14T23:53:37.991357Z","last_seen":"2026-05-26T02:43:57.708389Z","alert_count":0,"request_count":6,"received_data":134836,"sent_data":2974,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":1,"received_data":497861,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c5ca8344606c644357cc7bc5fcb4f2","sha1":"15e7956f4907328c3862fa720a83785f0ed12b87","sha256":"74dcb4cb8f2d15ddd47a1fa2cdb56cb103d54874a465c7b55698ab4f6c1cd63e","sha512":"d85c94991e10b65bb479d56f3d45b638f0f1e41a162ca309960ef86dcd5b5336ea6100adb6d2e72ef674722cf05978893d4e9c682b133f299d9eb829ac6123ff","ssdeep":"","tlshash":"78f04c0f859102324dfba1692e57a21170b6a0db294a4a0839ad411c7faec2b4785bc0","size":592,"data":"","first_seen":"2025-03-03T03:45:08.736625Z","last_seen":"2026-08-17T01:30:49.879233Z","times_seen":7870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"94b643dc7e513ffa4fa20c782571641e","sha1":"cc1a9c24c4e2e277739d523a0372263343ce70f1","sha256":"c30d370afff182768b130debb78cba10aab2d243f18ec00cc18025b3fcecfeb7","sha512":"a4aea76ec16dabf87dcda96b89291c0ce1cdd2f32daddc5288da49ff30cb74b73b3b25cfa4cf7103e71e23d5245a0650c0641fa82719cba71ca300741da20f29","ssdeep":"","tlshash":"23f0593919691aed8b9226ec9607bb19335845836404b531daecc6a834d34fa6073ceb","size":520,"data":"","first_seen":"2026-01-16T16:22:07.082689Z","last_seen":"2026-08-17T01:30:49.879823Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"3158cd3d76f40356eb57164b1167548f","sha1":"f579384800cccf1005bc29fbe8ee25ccfa79b455","sha256":"9b8437d1511c2041d9bdf3ab83c89a6b4c162d2e3fe7078a0e6587c14324491c","sha512":"35ccf5f2041d303c2efcfa6c661a9d343e361cc426f0162b4320be600028c86291c6faff3d9feeb117da10d0294798264209cc99d2995f8eae9dd0fe696f044c","ssdeep":"","tlshash":"1fe07d2719309a788028104c593b7e09b4b173105c12d200858eed553595ec34307562","size":305,"data":"","first_seen":"2026-04-08T10:30:19.871777Z","last_seen":"2026-08-17T01:30:49.880867Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"69d8c5f4f91b2faf680232f1631732eb","sha1":"733901cf3eb2505c7603e7876558e01120a970f0","sha256":"efd390f95385e0935b27410ae80ed18c176bd595e000699c7cd07bcaa12f47ef","sha512":"04ee8e30f0ce5631d6cb7a00c452e8d5e6729126b434ed1385c0202ffe1c9f23d64da1c74a08b1c00a6f75eaa807497a72002649d2cb4a7cf010a3be648c0f8d","ssdeep":"","tlshash":"26e0abc7a56522e003f2008ee82bb790baf52e09883af400869ecc9c6824ecf411f819","size":420,"data":"","first_seen":"2026-08-17T01:30:49.882154Z","last_seen":"2026-08-17T01:30:49.882154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a03d5a91fae89933e880f30cb9345dfe","sha1":"596c64235d10c06072099f135d8d0219bb2ade26","sha256":"c540012968ef63f9df49d40c4b04f3a5cce943bb85beea1152c842d681c66b45","sha512":"b84a0e52571ccdb54ca7f7f21feb4ecec5d11b3593037597f44e515ac38e9c5d07a554b719ba7defeb157b74c2abb4750a87a6f149a6d530079e3f721e668f43","ssdeep":"","tlshash":"7ff0978a7e7fd8b44aa3925b333fd2082062340a9821f1153c9ea94c5f10e87ca12e89","size":617,"data":"","first_seen":"2026-08-17T01:30:49.8846Z","last_seen":"2026-08-17T01:30:49.8846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"72a22b4dc0f765850716f95c21c2968d","sha1":"bc77122759fbc7e74790781bc1441ba1c37ab8b9","sha256":"ddfe10a272a439b5c7635c456beb72be0f89204986b22e2d6d03c827d7a28c2f","sha512":"6e42b41aa9a7f1e6ae57fc610053d0a6b8188080be6a4949d05ee858893a159231861f162aff7e5892101183857d685ab579ae845641d79eeee30c5f82e5ef69","ssdeep":"768:EmZnHEfO7w77ZECflMZB2loDRftNppWTOVwb:EmZIB3FflMZB2lGRbpsTO2b","tlshash":"f633dcae8e05dba81ba82c5966bd6c5c2cc13bc90cd47f0dd515d0ad48b11fda49eccb","size":51083,"data":"","first_seen":"2026-08-17T01:30:49.885669Z","last_seen":"2026-08-17T01:30:49.885669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-17T03:11:19.348533Z","times_seen":68426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-08-17T02:47:15.128916Z","times_seen":10742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-17T03:11:19.349453Z","times_seen":52608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/chunk-EPOLDU6W-DoW23xIF.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce2c6dfd9e21619915061240473e543","sha1":"07251c0eb37fd17ab7cde9c6eb1b4accd82e9c07","sha256":"fb2aaef4b434121ed3ca27da72935b05b3a4e7e73945054e8daf46c1f7ec1a43","sha512":"7f6ca8729326519a3ec0d35ab3854193490a5237a371ac639fcdbdf50fcf2f6a38e44168a4060822b4abe6b2d024210b0fe1ea8687c9f656bfe4cfaef519f21e","ssdeep":"3072:1MM9liG+0lAPQz0eat+1RBXSXg8JYYWEU:1RV0+lSXgsYYNU","tlshash":"ccc33bf97292b0754bef13f180bb0015b3ba2ca9245d8015b2acd99f35b5c08967bf79","size":124617,"data":"","first_seen":"2026-04-08T10:30:19.835332Z","last_seen":"2026-08-17T01:30:49.782979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a05f4ce4b3d5c97fcfc45c96fa67c1","sha1":"95e44327e89c4c2a09c3928bd2fa9107853e7a1a","sha256":"e560e234afadbde29f176189cd2466dd7df7dab1ffc1a7c3e0e0da4778289ba9","sha512":"2a17739506971aa7caa0434b7d04eb8b883f8ac34cf3101abb848e60bbdb929c92f5f49f8fe3cf68ccb2c4eb56178ef200c474112788630deca6858988485a38","ssdeep":"","tlshash":"be117afee7d8e52951a422d26d8b322ec4c1311f8c96d47307bc9ead407529854b70a3","size":933,"data":"","first_seen":"2026-08-17T01:30:49.889039Z","last_seen":"2026-08-17T01:30:49.889039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/index-BdhrSI3S.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"465f06281594d53da0090574f8573260","sha1":"56965699cd236ee95341b8a0abfec913a51fe815","sha256":"353bfe461bd2aa01f8850ef37a943a9daac8997cb03d453b1055bd1723d851c9","sha512":"6a5b201993f28246902e77dac5730a7d52bbed6a269a447676e921a99512b6a3cb27a33e446005adcc3d2fcc7d92cc956ebd924ca0e623429d2edba6bad037e2","ssdeep":"","tlshash":"c971348db7c4f08249c6a960037ba31772b9377328bec2a193ee99b111775198237f74","size":3661,"data":"","first_seen":"2026-04-08T10:30:19.808961Z","last_seen":"2026-08-17T01:30:49.87315Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/mutation-Bbn4P6Bc.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"58b72439dfe6f3c75aeb002a4a156353","sha1":"a2a5045a045c47382abd813a642cf36eb55f7183","sha256":"7bd6373c32c76f906ffe4d368f15d10b51ed960bd4d176573b63dfa40564c480","sha512":"f4b4f434ea348fc9677dcf4c4f3f93680cc82bf309a4e398b91857b5d09634b947a80d49d7a9f1982a18ef047c0249cef599807930805f89898c919b4156442f","ssdeep":"","tlshash":"1161539b7116126b7ec245d1981d192850389228ac52953c79bd8bf7f0864cdfceffb4","size":3404,"data":"","first_seen":"2026-04-08T10:30:19.776601Z","last_seen":"2026-08-17T01:30:49.831711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/createLucideIcon-Cwz2P9OQ.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"902d36857947d5afca867cbd3209dba1","sha1":"2ff25b1a8689445aa770c014603090034ed27196","sha256":"65e05a7c89cd653fb8fc03304490f64659b1a88911bce2db8d859773e13fec12","sha512":"3c4994668bfe3efbb4db7163492628fcbe4f499751f3dddcbf23c9eb687351dc49f4875ad41cd51cfb36847fc6d27fe821190ddb0c4acaddb57cad640b179089","ssdeep":"","tlshash":"15214408b3d5283ca23584dd96583169fc779a18f9635a58d2fc5d1b7627142a333acc","size":1211,"data":"","first_seen":"2026-04-08T10:30:19.814517Z","last_seen":"2026-08-17T01:30:49.833642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Modal-BY07XhWn.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0537e26a0c74824d9716e1a7c3d30855","sha1":"c64622f34091dc104e3850f2afc630126cc60429","sha256":"787754745216383e1fb1339c7086e9e3a7d17ad947b5f578bf32da84b3eb5035","sha512":"d74dadb9a4cbd0fb67dbd322d39ae921cb3f7a625be824ae82552f4259c2e01a1450e8656991ca20156e7ab6b317c2bb711e71fca633bc1dc4e18ec563d2bac0","ssdeep":"","tlshash":"75318812a10d9b08f447857d717e5a08a053a85cf7264fb5e31e643715e0c737b6e3e2","size":1709,"data":"","first_seen":"2026-04-08T10:30:19.779084Z","last_seen":"2026-08-17T01:30:49.835862Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/menu-CQGmLgWw.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fc21135e7ec003bdf62356785a1ca30","sha1":"71c8b9bfc4319c4959713d12b10c980077829332","sha256":"3230ffc17178b47c85789fbec3a4b72599686c813f427756192d5d33091cb833","sha512":"3936aad146e851c4a6628adc783f9896bd58c56f7afecce5d3e1a6aa8e158dbe5df7359e36624dc4cbad1710fff1ee6306fc2511e63ba6e363268ed9ac004847","ssdeep":"","tlshash":"f2d0121f1fd051720704db8a07577050ccd505ec03ea0d917565f6abc36149369ecf03","size":201,"data":"","first_seen":"2026-04-08T10:30:19.753801Z","last_seen":"2026-08-17T01:30:49.727096Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbf0dbf75074c7e7ec458f3a7785a8c5","sha1":"66b14187939934818dee6b2659116dc24c49b939","sha256":"0d0aa37221185d7f49a62105696cd5701af75fddbd43356e6b410a0d9596e22b","sha512":"c059e16740dbf081bcc0503c0d4d998a8dbd37839deb907a9e52633c6bfa94d28811b09a5f7607b730025d9dd976fbd0b32c6cb70e3c4029fdf6deefbe350b67","ssdeep":"384:cEajFtP1MLwsrFH995A/+EaNeQCBudmznHdpIFCW/9L2IhtkDxIRsHL0/daRUX:cEaz1MLwQA2EanCdpQ1Fls4la6X","tlshash":"44f27eeff851d481d3914cdeaab76e39e047308a4c9ea9a7c7acc7d4c04c4749b0996d","size":35026,"data":"","first_seen":"2026-08-17T01:30:49.892006Z","last_seen":"2026-08-17T01:30:49.892006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"81ffbb017a31196b6aeccf6e13aa6677","sha1":"b66d6a8a91f998c95de20bacb3c433d0747e8be4","sha256":"91e54bd20e74eab41877e27fa40581edbd9ca90bb574c97cf9ec714641fdcb84","sha512":"209a38a852d9ab26dbc80a98529bb0b6507f416bc64a9debad39ff44a9f4d6cf537123070385aec4fe4d5c3316d28d448c4542807133df429f151671e1a6d4df","ssdeep":"","tlshash":"fac08cf810ec8485c18118c9878262b42a4352ab9c8d0abe71edae0959454ac190b8c6","size":161,"data":"","first_seen":"2026-08-17T01:30:49.893278Z","last_seen":"2026-08-17T01:30:49.893278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/layout--L1rOhfF.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e2bc34958dcc12431820768cf74cb54","sha1":"89d67560ca323c1e7d2023c67959a03cbe51d6da","sha256":"c5284519c8d1203abbf86e0a1985b8cfbfdf6f9dd5eae0456ec0a588c977c73c","sha512":"1f40e7c169ff3fcd8b4f8e330651d77cb9bbb657532e4050c99de9e9bed5a8104f6a1e5becf96019b2e651438d0f803e858929d0915a640256b4a7f60a2a2471","ssdeep":"384:lp0Hh5zRsRVTaUpoIRaeRCq3EAlDZ/o3csqKrSgNvpEM:P0Hh1RMVTaUpFRaeRCq3EAlt/o32KLv3","tlshash":"5b92e805a1046b9dfd3349cca89fd008705e5f58f63f49e2a33da03622648a7ba6b7d5","size":20700,"data":"","first_seen":"2026-08-17T01:30:49.844695Z","last_seen":"2026-08-17T01:30:49.844695Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/VideoCard-CKKH0jOK.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9043bce05fe46846b6ea2e459f2288b","sha1":"9f8e5667d0ead48ecce371dd9f67bfcf1c6c0f8b","sha256":"eeed528aabd857556fb7ab49a15b3e193b1580e9f599ba4deb6a8899c87a126a","sha512":"f537d68da2ed54a64e9aa40407468f1036c8ad4127f787b3ab5dd2f76cb7583fc52bfdd175fde068e127bfa1e846dc0311921691a2f9dfbe71a79500cefea1fa","ssdeep":"","tlshash":"e341a8c4a112d3dea11f8bc49598c6482056c700fbbbc95aa3fca82d13988f4a71f748","size":1904,"data":"","first_seen":"2026-08-17T01:30:49.861453Z","last_seen":"2026-08-17T01:30:49.861453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/authHelpers-CUihrbnT.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cfebce166f877232d5574eece132da4","sha1":"441f8e871f42f88615643993b6cd209b81bad242","sha256":"185930c676fdddca01904542ca029e88fe61ff8da15e3d24393a8193d069f9a5","sha512":"33f5fe71c20454e5fcf849614dc1433dd4beb613b9e10e2401696aeb1accf4e41b7ccbdb29a53b0ee6da7b90c2f60125244c4463c4e7febb83283ae321f5304e","ssdeep":"","tlshash":"83f022ceb1efe2a4b2c72829a8eb8019f13c8cd0842c5010a021904979320f0d266dea","size":575,"data":"","first_seen":"2026-04-08T10:30:19.786123Z","last_seen":"2026-08-17T01:30:49.858274Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/home-DGg1VAZ0.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"16b8d2c1a8eecacb51334b2decf93561","sha1":"81a40bceaa5adcc926ab533b6269f6400f5e595e","sha256":"0ff3258173065acba3ade4a7577b9b3041d6947b99df74d48f465b90931995f5","sha512":"adccc31251bdb360227d65f93362e8d747ea4b10b7a7d325703d6f3993ed62dc19f5ca359d1a2fcbee5f3e246fb25a97c58525e12fa0704acf2943e40c483809","ssdeep":"1536:UNwgATPY/Pw6Sz2XdIKeP5gP+J5laTmmC14oSHu/FBl6vHxUGpkqViA6w5AwHdBF:UygAcw6SBgP+J5laTGt+H4WaVbG","tlshash":"a8a30889a124753a82f716da53a9c101b2b14944f449c8a8b0fc8c6f597e99803ffffd","size":103125,"data":"","first_seen":"2026-08-17T01:30:49.847124Z","last_seen":"2026-08-17T01:30:49.847124Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/chevron-down-DLSDi32i.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"337050748bf9158696f456e39e110917","sha1":"f7f6105161d989cf7b9adf1fba55ed43b85d1f2a","sha256":"e00fe2f58db8aa29ce696087f1613a0a9200030d0badafed8b7a73048ac28259","sha512":"16d7f2e75e2cad1472da1b4c1cdbbc319536459bd35e5fdb9de4d6a797b7e31d3684a6ef14469d6f49809d30ae0f36bc3b85bf266a732ee0db44b0f75e270d21","ssdeep":"","tlshash":"d6c02b2f377060b1030c88c9210bb740c8950adc63d04ec4e11dd62fd340cc300cca00","size":140,"data":"","first_seen":"2026-04-08T10:30:19.741805Z","last_seen":"2026-08-17T01:30:49.776074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/RecommendURL-DheZE40I.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d506b6754343e7faeb3b41260c6a87","sha1":"da9434e5cea1c30c2e3b7b053b7693d998d85c4e","sha256":"f6df4638b231e3b53e0997d80f985d53db95ede3f93396dad7327eb08ed892e7","sha512":"ee4c8646d23bf47d67bb8edcf3f8c62a0354f8bf5bbaad689d4778ee64746f0a7e76c3ff2d8ad7cf02297585730a2203e1804943fc2e0881fa17c2bec169d699","ssdeep":"","tlshash":"4d119b0ce041effda86718c4991d501c71074beedb7e48a1b1bea00002645777a6b3d9","size":941,"data":"","first_seen":"2026-08-17T01:30:49.802992Z","last_seen":"2026-08-17T01:30:49.802992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Footer-Dy6eNeag.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd10104d0125ea2aea46eb8080d60c4","sha1":"69dc9d13e62ab281defa3df7e4f92fc869f970a5","sha256":"f0fd5d16f524c53ab19df9b19d87d53f7ac855104b3810521700331887476aec","sha512":"9bd49f0d1b5686d1493e23e97553d85dbc6de65c523cabd1108146962108e55b03ef248eb2b47c0ded75412e20b80219f6f5af683c4971c04bf9bc73732d2f73","ssdeep":"96:14WEnlwLDRTRakVszxyl0LkY5uKW55JJovYey1QWgvn:14WEnlM/DIIl0LkVKWpivYey1QWqn","tlshash":"04b1e018914a6fed9e1704d8ac5ee00a714b5f84c67fc895607d301326d598aff93bc0","size":5270,"data":"","first_seen":"2026-08-17T01:30:49.87656Z","last_seen":"2026-08-17T01:30:49.87656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/HorizontalAds-C53IWSLj.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dba5c8d9b435c8e84d85c0df88aefeb5","sha1":"6045f7cfc58d466bf70c648d13c791b1ac417b21","sha256":"0c6a1dd92181ef6f8c2318c667c71badc29b38652a9aabfe4280831460c86efc","sha512":"f7e66393cc441c465b8aa8e7c186d5b71af243d537489b8b64ad91a73467c0b4c76f481b65ee5bcc3d606675474cbec3dcd4d1d452335b99eca31c96f4549f2c","ssdeep":"","tlshash":"0ff04c0da010bbfcfc758dc98dac901830130fd4db7e49a2607974010634a677a17b9b","size":580,"data":"","first_seen":"2026-08-17T01:30:49.825962Z","last_seen":"2026-08-17T01:30:49.825962Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/middleware-BecK8QcD.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"365e63fb510a7ef98d404851a9ef797b","sha1":"e3ed5f6e770fd44eb535ab7d8d9cd1d14b258bf2","sha256":"f0988d2d2bf31af364290cf65d0923f72004ed12d1a17afb27da560a321be805","sha512":"0102ba83bcc05b89ea8beaec4ade64d06846d28799637ad8708d12c6e1f6467d7720f4118346d5d3e9378e106d30929dd06b2de515362da361ebb03ae6c32965","ssdeep":"","tlshash":"433164cab2e3e1702fdc124e84be91b6f7299564311dc451d11fef0a390698ac27ed7a","size":1814,"data":"","first_seen":"2026-04-08T10:30:19.754897Z","last_seen":"2026-08-17T01:30:49.785494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Image-Cp9sorVE.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dbe976d7a9639b02ef4b2d4c22b5d76","sha1":"003623a395b4459f349a3747b17f3f7dc6be7800","sha256":"653ac02a473db89418cdc74111f5110db3142759a0a226b3f91fbcd9440c13fc","sha512":"8c22b550dea0a759d1cdd5fce0a745768ca453cf5addec3b3d29aa70c3aca099b3a5c46f59dc191364b08d6c39056dd4d639f76fc9fc4c09aea69ef3dc50573c","ssdeep":"384:bRd3hYtjEUUTqlXb92+Ir/H4pSaZp2Q0lpr2wpw0R/cQYau6iqpC3pDRD5/INH:bd8E34b9jIbH4pclpr2wpwCkl6ns5J5C","tlshash":"0282d0fef0cef4f68b6d0971822d55a94d695c2b21340585b3ecbcb062ed05b94a74c2","size":19239,"data":"","first_seen":"2026-08-17T01:30:49.823774Z","last_seen":"2026-08-17T01:30:49.823774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SMW04HSRC1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfd59b7fdc2a1f352d0bb445ca85bd4d","sha1":"d17e50ae9a2559a4a1072d13ed5413b347f57b52","sha256":"750e424cc38f515335ca210e69a4fc904fe2256a5be5dece31ea654284a3472c","sha512":"9c1918068bde94fa7ea67a9c73c6f7d4a600bdb5a1038e36e42b4a01541bfe432fe0fc72a3976d66d13e109804d65505d451eceee73ff95b8b9b6e095b094661","ssdeep":"6144:3MoaBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiDrYMAwbGswDvRN:3zInaxXX+xOdr+wGs2X","tlshash":"13b4e78db3d674625396f078903f01cba57b29a2b45cc89af189cce42e7469a4137f7c","size":497257,"data":"","first_seen":"2026-08-17T01:30:49.763305Z","last_seen":"2026-08-17T01:30:49.763305Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/userStore-CTIvKSxf.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c22ebd70fa05d1941e1f9b90675cfe","sha1":"f8b9b820e1402173988e59f579747800ebb4bfa3","sha256":"98fcc3ea6079da9350f10a53faa75237317ec90dbd7fc814ce250300d794a53b","sha512":"47420c53b7abeee4bd6531538e1ad7e773982f8784e1b6a4db9198feb801cbd5c36ec5e166aa3da707383731a0f3f23b460a86468965dc5cef7eb5b3ab52f276","ssdeep":"","tlshash":"4611ef1c8a81867443d51efea64092f0137c067021de8fa074754eb539fc6ca92bbe7a","size":1026,"data":"","first_seen":"2026-08-17T01:30:49.800648Z","last_seen":"2026-08-17T01:30:49.800648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/configStore-Ccg3vpH1.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4eea3e943fcbe01d3cf06d7f3a8780e","sha1":"1b87ac80e25fc0d6303ca5d8d3e3d1e460937785","sha256":"6bad1a327e40b703eb6406f38f4826815f23f0489afd0b0406417bb55de8f315","sha512":"d9cd1c9d77b994ffd35be4cbeb568faf5b2af831427387e926796ede0f010b7dd31a8d682882583b8b0d89d8dc825c1fec65c1b683f52a0f0d2e7901cf1d276b","ssdeep":"1536:TUaDvLwsbtOjKohuCDAPw8EnrwAeR0Tt0aPtNPU9ArHM/yjG8nR:TUaI04phufm66TK9a","tlshash":"adb35ac576d5b0e183a760e4443f100bf2bb6922694c8498f158edde6cbc58a827bf7d","size":110014,"data":"","first_seen":"2026-08-17T01:30:49.752163Z","last_seen":"2026-08-17T01:30:49.752163Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/QueryClientProvider-C6AG8QPJ.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e865067109f8bfc7e9aeccf1b24d13cd","sha1":"0081490537665ec62fe9e61338dad88dca2f79b9","sha256":"5d4bacc12d71cd8b9bbf2cb43e05e9fa396467448af2ff7c3c336b20a669d8be","sha512":"6dc2e932de05ea76feba7c736f53004c4b441223a1f37ce3827270cf8cb4498f834082f13d5a603269db47265676b31fe07538f3b4e1b787edc0c435907b3fc4","ssdeep":"384:fQVS7PlRChpLI30KWhU+zEeYEpV12fFW8gauIvsGJ60cn27zB:IuPlRChO30KW5OEH12NW9IvsGB3x","tlshash":"9352d99a7286a1372ed1c195442f5126f2246800740b806cb9bdbdf6f973dcfb4bea34","size":13661,"data":"","first_seen":"2026-04-08T10:30:19.740226Z","last_seen":"2026-08-17T01:30:49.822065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/root-sEssBUdk.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"96720eff5886b490c1fe9fdcfef4c5ad","sha1":"971d57f535c0703113b87022157d4ca615ccb133","sha256":"be1a1426c993e444c7fbc4ee34c964e2bd591d500011b4833d899fa7bce38ec9","sha512":"13000a63de98914ac7b693280e46a5c9becef7915d6f0bf0de9fb08abeee98ca09f4f37b663af206ddc72c11013ec807404b65a626a2ac4786c80723e6678494","ssdeep":"192:99CzJMHVE7+gg6sKN8pvvjw0XCDi4GvWvyd8rfU/axFKSCffrOepJs44YUHWy:99AaE7+JKNMX7vWvg/Rff7pJs1P2y","tlshash":"8432d8d631c2e1366b514482ed3f4254f1221e16b425a01cb59c5ce7bf23dc7f66ab35","size":11497,"data":"","first_seen":"2026-08-17T01:30:49.860047Z","last_seen":"2026-08-17T01:30:49.860047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/uiStore-D1xMnVIo.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9862d3e9c6cefece58a91369e8bdc77c","sha1":"207c6a422e587c87578c07577f1f7160f72b14b7","sha256":"693726ea5bb702de1fccc3be499f259f37be7343496807ea62863670ba298697","sha512":"aca31dceb544101398dbc6f98dd03713931804799c23e17afeb5fa11292ae8a34703d764ff29156444256c7b504a8d4c622d7fb2db34dce9999e10f45b68d5cc","ssdeep":"","tlshash":"ee01ce7ac81a6beb8cf21355cabca3f28b519814f36701bb151f132f104c50179b0e39","size":811,"data":"","first_seen":"2026-08-17T01:30:49.810215Z","last_seen":"2026-08-17T01:30:49.810215Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/scriptDataStore-BVkpUaUy.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f64f952d014f35cec28b374b5d797e3a","sha1":"3f7df76d313fd170626cf30e6311d34721d35c48","sha256":"80940deddb63c86a1f048cbe7fcb61d7f59973159b1fa810955094f97bb774bf","sha512":"d35ee4a5454ccc8ffe1be6a35b887fc4036a405c573376bb850687448ae3e510042b494f8d67e6f98652574c00eba138a084760b6a0edee88d8282bd6c410562","ssdeep":"","tlshash":"abf0e2963c08b778604d2d78027ce687c7d4b50ce2b981a11c66e7eca7c4cd1361c744","size":488,"data":"","first_seen":"2026-08-17T01:30:49.812141Z","last_seen":"2026-08-17T01:30:49.812141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/seo-M-DZZRA2.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c7ae96a0723e15cea772a473dad88c6","sha1":"ef16687ca6dbae25af0d653d7b2dabf93f612196","sha256":"4e0fe14f008816f4a44825cf3823494d4a076a7a41045cd3dadcaba7ea82b2ae","sha512":"06099c22d94bbee29dacbcddf9e9d7852f42a6e6c241854c49e3e77208bd4a02482e7d1954d8829d55f60d1d69f4f5b209822139c65ff2ed9d9ce2c6861e338a","ssdeep":"","tlshash":"2f21df86a442a4a713fbd2505cef320ad3288e02e4a8cc023368191c16d6be7c4b5b2d","size":1203,"data":"","first_seen":"2026-04-08T10:30:19.818641Z","last_seen":"2026-08-17T01:30:49.849371Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/entry.client-D7xZRhK6.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c1b7033815d04f85dfaa28848d5a7cc","sha1":"91185dc2ab11f8e431e444814d6770bb99e4f07b","sha256":"d06c294e6f67593fece32dc94cfe5d5e690de2ca8dbec287e47f372e3a64daad","sha512":"8a91f457002ea3d7a23a23eb5888103cf57b7699faa7a37043612e278167ba2d23cd0bba3f07eff256bb5895182f25b192d148ff652f352ba00d0d9871affcc6","ssdeep":"3072:sQCYAMiv3GmOL87v/+OLSrfonc5F6LjThVSQPg:sdBLvGHLavhL2AiSg","tlshash":"a0040bec32be67166eb355a7109f1503727c3823680c4c71a211fe9967b844a51bbfee","size":186529,"data":"","first_seen":"2026-04-08T10:30:19.830415Z","last_seen":"2026-08-17T01:30:49.856377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/menu-CQGmLgWw.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.338Z","timestamp":1786930202338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/menu-CQGmLgWw.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"c9-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AYXBIIvpSJ8xLlj9u1TQrjaiZpZOVNypysmDNJKejYU40KDu%2FWN113RCWiaYBzpRwtGVmR%2FkUcjCu9ebrTsa%2BXKCEg31K3URn96DBx2l9flm%2FqEPA6cSrMnZ91ah0RczA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e9449a9b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":201,"size_decoded":1025,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"0fc21135e7ec003bdf62356785a1ca30","sha1":"71c8b9bfc4319c4959713d12b10c980077829332","sha256":"3230ffc17178b47c85789fbec3a4b72599686c813f427756192d5d33091cb833","sha512":"3936aad146e851c4a6628adc783f9896bd58c56f7afecce5d3e1a6aa8e158dbe5df7359e36624dc4cbad1710fff1ee6306fc2511e63ba6e363268ed9ac004847","ssdeep":"","tlshash":"f2d0121f1fd051720704db8a07577050ccd505ec03ea0d917565f6abc36149369ecf03","first_seen":"2026-04-08T10:30:19.753801Z","last_seen":"2026-08-17T01:30:49.727096Z","times_seen":2,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/root-CPDOt-ly.css","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.349Z","timestamp":1786930202349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/root-CPDOt-ly.css HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"a1ac-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyRN7B%2BUxU5MdvFdFN0YWWZnq227V8Cfxu3j81%2FX%2FR855luLEd0I3OS7hJi3ezQ4F0xueGetOMn68GWH85GOAZ6Yp8igSyPuwu5c6qigOJ9iFLOyh0gQlEH%2BQl4sTxC4kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e944aaa95685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41388,"size_decoded":9236,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (41387)","md5":"05e7cbeee91b9addb0aa8db0754cc2f9","sha1":"b5922d6ad18a577729acd3ccf96ebb12e17829f6","sha256":"856ad112f29f43db4a9e3894efbd26a30d82dae9fe136af88ba108e697208803","sha512":"6eb0e0a56ab501d1f26a8697762080f8c3cc916a5f4cd4747216eab9eb50269f9f4a0bbf72dadcbd3df3a93f88d6dfdc5446b0714214dfce3587af81662bf4a1","ssdeep":"768:Lbv4OOPbt1WgiZNOnFkss6uWojeta4U40XjId7:LbvXOsetZUVk9","tlshash":"b503a5a4e32ad97ffc23a4b9a3acf85c6125b582de3156d8fe02611296c77f10c63714","first_seen":"2026-08-17T01:30:49.730542Z","last_seen":"2026-08-17T01:30:49.730542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/7.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.287Z","timestamp":1786930203287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/7.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8607\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3bv47:0 (Cdn Cache Server V2.0), 1.1 ld84:2 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:14 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14871-40636\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":8584,"size_decoded":9670,"mime_type":"text/plain","magic":"data","md5":"6885e7696f5ae36ed621947039b25723","sha1":"f20281b4ca1e9fa7872e5241a85b3c3f98a7d6f8","sha256":"3291973ab7672cdb33d21222f65c21e775e8460d2a1c47ff59010c20dae2120d","sha512":"22d16a8f66c1f97e01eeae53183cc7bddd7d6247f2e00c004c87d5408fed9303d4cf305551904dd7d8e48a5209ebd55f2ed323b5b8e91567cf8ba9d958451e32","ssdeep":"384:Y/14sPTOyq4izByuvMl4C7507AX7QtM4NMW:Y/VTOyq7zMUBC7Zyhx","tlshash":"9542c0c68095f3c4f04bfab49997b999f30c1a9adec60ec0fd4995c31aa6604e5ded40","first_seen":"2026-04-08T10:30:19.745306Z","last_seen":"2026-08-17T01:30:49.734398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_box.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.392Z","timestamp":1786930203392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_box.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: openresty/1.31.1.1\r\ndate: Sun, 16 Aug 2026 22:27:56 GMT\r\ncontent-encoding: br\r\nlast-modified: Sun, 16 Aug 2026 16:25:26 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\netag: W/\"6a81e476-f8e2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: JaOA7z0FxUdio4WjYGc-jlWT3NIJhUeQPbqzy-34TIgHgTI8dfuRwA==\r\nage: 10927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63714,"size_decoded":48792,"mime_type":"application/javascript","magic":"JSON text data","md5":"9aa03b8b8c1b05b7023cd1fcc0dff779","sha1":"061148b269945bc115bfcf22f88a7215cca34bc9","sha256":"b8010bb42520840e91fb89330b4b4ed07adf48eeaa969b8606618a0320991858","sha512":"c6d1a48a32566f97f26f2c80ff4616ff82ba378d59a2873f33212c0eedf6da1e392767b8726fa566cae104447e7eecbdd87db1dd21c189313a87f64920560141","ssdeep":"1536:XQhpTXsJOBKQxGVlbi8VodTIvlgew6RllIG7KvnGoY:gn7sJOBBsVcWodT+w6RfIiKve","tlshash":"e75302128fb537458159622cb07d331f8ef853a96c5db8b26e8175c7c40777788aa43e","first_seen":"2026-08-17T01:30:49.738645Z","last_seen":"2026-08-17T01:30:49.738645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/1750138112678-953712345.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.631Z","timestamp":1786930203631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /1750138112678-953712345.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 24101\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04l4h128:14 (Cdn Cache Server V2.0), 1.1 ld86:5 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64517\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24420,"size_decoded":25139,"mime_type":"text/plain","magic":"data","md5":"4a416375940b0e343151787ce8288ed4","sha1":"c5dc55142a2219da5b235a4147f7f3d0449ca2d7","sha256":"3f5748331e539f49865ca5957ab4d036649517202dbd29a83c092cf61ed47a31","sha512":"129cdabc2bc28646174be4f882ecb960d9f151d3e3ead7469d41556aa85814962aef2fc82821627e76c06ca48ccaad640d170f1901c345bada42eae353d94b07","ssdeep":"768:pQWzRkPFbRcoX7sN0HNBI/GVnhTbqtPrNxB52N4lkHCaOrW6ERh:p9qNbGI7qE1nh+V3xlGiW6ET","tlshash":"27f2bf0d03a0f3d5d29bacf4a60534d4aa818bd9e7d26b90c851e0a5a683ded37fd9d0","first_seen":"2026-04-08T10:30:19.819869Z","last_seen":"2026-08-17T01:30:49.74268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777110438139-803706993.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.632Z","timestamp":1786930203632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777110438139-803706993.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 157031\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2mg31:10 (Cdn Cache Server V2.0), 1.1 ld83:7 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64519\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":157713,"size_decoded":158069,"mime_type":"text/plain","magic":"data","md5":"69043f237ff0f57df56533543890f0e1","sha1":"20c607fd3bf06d965a66b149e36a53006d2e3228","sha256":"fdb882a030e0b4e988d41fe6059cf33725354e59c8387815f968f7e571975a52","sha512":"15eb8bb929ce41ef84c1d85db2297a2ac4717d0a02fad90f51b9f187701c082494e3802f73a772171134cb99fc9eef4e9c47db371e2fe8fadf86f842e9fa4594","ssdeep":"6144:F1Crj906ugR1EJCR8Z5OZU89oAJ7qdx9V7zt:F1Cf+6uQALZ5OrSAJ70xHt","tlshash":"c734c0065351f3f0d25ba4f9790266d4b10097b8e7dabe50ce249591398b82df3af8e1","first_seen":"2026-08-17T01:30:49.745827Z","last_seen":"2026-08-17T01:30:49.745827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777535864464-419052724.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:08.820Z","timestamp":1786930208820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777535864464-419052724.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:08 GMT\r\ncontent-type: text/plain\r\ncontent-length: 38631\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3nm163:12 (Cdn Cache Server V2.0), 1.1 ld86:5 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a826420_PS-ARN-04w78186_15160-64592\r\nage: 3611737\r\nexpires: Tue, 06 Jul 2027 06:14:31 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39302,"size_decoded":39669,"mime_type":"text/plain","magic":"data","md5":"3d36da4718a1fc5c8195369dd28fc55a","sha1":"2b2cf4381a2cd0fb87fa614df16c473b0ce9fa69","sha256":"4ea233c65f6b9800d98a5b9c1467ae5b0f72dfda6008ea589077c27ef5c5e898","sha512":"b9591281f157ff3698a6d4ef8aac878638cd49c8d47347e31a0f522f1c1a5ed619978460da8d284c993e7d7b522a86202e14239fa97377860cea93d72bff19bb","ssdeep":"1536:oKkmS8R+gH7dhtiRYJcw2pg7RbI3F+pnAeONqLE1/EBh8:lHdR+gI2p2m7RBFAb1/K8","tlshash":"d653bf0b5352e3f0e40768f4a80235e8a9415b7897ceea51cd30d0e17b9786db7ee9e1","first_seen":"2026-08-17T01:30:49.74892Z","last_seen":"2026-08-17T01:30:49.74892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/configStore-Ccg3vpH1.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.326Z","timestamp":1786930202326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/configStore-Ccg3vpH1.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"1adbe-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmHFJ8eeXo9qSM8uI2bY3igDwVgLwHcXwikVKpcEBvVia3hbZyUrlUVaO%2FZt2I1YWOWC2iP4yaRAuxOinkxFIN2gdTWygjAX6a0PZ4YCAYysrnzRGOG4QkFpNsaNFo6P%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9448a915685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":110014,"size_decoded":42375,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34402)","md5":"f4eea3e943fcbe01d3cf06d7f3a8780e","sha1":"1b87ac80e25fc0d6303ca5d8d3e3d1e460937785","sha256":"6bad1a327e40b703eb6406f38f4826815f23f0489afd0b0406417bb55de8f315","sha512":"d9cd1c9d77b994ffd35be4cbeb568faf5b2af831427387e926796ede0f010b7dd31a8d682882583b8b0d89d8dc825c1fec65c1b683f52a0f0d2e7901cf1d276b","ssdeep":"1536:TUaDvLwsbtOjKohuCDAPw8EnrwAeR0Tt0aPtNPU9ArHM/yjG8nR:TUaI04phufm66TK9a","tlshash":"adb35ac576d5b0e183a760e4443f100bf2bb6922694c8498f158edde6cbc58a827bf7d","first_seen":"2026-08-17T01:30:49.752163Z","last_seen":"2026-08-17T01:30:49.752163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/8.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.308Z","timestamp":1786930203308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/8.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 7813\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3bl31:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:1 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13245-22507\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7790,"size_decoded":8885,"mime_type":"text/plain","magic":"data","md5":"858036d512fb88ebbf81a473efaadeb2","sha1":"36e2b458f8eeea5216d329e8f0c9ae6fd7642feb","sha256":"85dc3b2a66a35613ceb2874b36823b6813f1c7027ef9fa9c0c7d4488c9413b67","sha512":"fc7885ee189247786d2245124b4eb1da7b286d603ec99337642d5e0b2b85a3b08197bab69e7b7e77726f8805c9a056f8f1247bd313938b9a83e11b5810afec45","ssdeep":"192:/uXAg+UGsQzyqL1YbxugZcoqSVfABgn7mDEEHGznMe10zmz+dEi3:/1LUGkQ1YFvZcoqSVSVA0GzL10ziIEq","tlshash":"f832b0ccd909f3215f06e8dd3591dedd160a9f8886b9e76ccf30410298e6528ab4e4cb","first_seen":"2026-04-08T10:30:19.764917Z","last_seen":"2026-08-17T01:30:49.755029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777875842426-109507939.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.612Z","timestamp":1786930203612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777875842426-109507939.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 30306\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2mg31:7 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:10 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64512\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":60161,"size_decoded":31353,"mime_type":"text/plain","magic":"data","md5":"c071d752015519b2bd7d3096dbce814e","sha1":"8efdc9720c7d8bb195be5dcc0f41c77e2a273002","sha256":"ed19be063b1fc0475821b7a21bb2029321f1d7f99ded0341f5b36a5dd03ed000","sha512":"78bec33e7bdd62fb60f295595c93c6a945c7c44081f090b9ffbfa9d81841bbba01af78f1fe94b7e957d08b358a9c2ba485b5a039f647b7c5883c73ef47b0cda7","ssdeep":"1536:wrlHOYwgS2vXTGOLDmllxGWXTGOLDmllxGWXTGOK1cwkRdAiQVMRdAiQVMRdAiw:GRkQvDfC9DfC9DWy1C2C2G","tlshash":"82939d5a43b1d3f56207bdfa680228c4514987bcd7da2f80cc658698378b92c77bedd2","first_seen":"2026-08-17T01:30:49.757936Z","last_seen":"2026-08-17T01:30:49.757936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777110575085-714822733.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.627Z","timestamp":1786930203627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777110575085-714822733.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 44778\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01bbh129:5 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:4 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64515\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45272,"size_decoded":45825,"mime_type":"text/plain","magic":"data","md5":"43067301865bde2e019fbf380ff71414","sha1":"029ded40ef18d977e0908d029152b19389bfcb82","sha256":"3ed8b6f0554a9970601dc522b60a28e2e25298b6c2dabc8b30ad2a0e357cb79e","sha512":"85967e90f2b87f4f0f0436f71e72af8dc7a89d2b8723800a124700865eba5661414e5c38c58900cb80e1efc91fa1c388dcbd6505132dbfa413de8ab04c01ec83","ssdeep":"1536:m4qVSoG3tgQtpKg3ZHaX4S90BEOrT3RzgUXgGNFO9Ov:m4Bn/tj3Q4S9YEW1zgMgWGW","tlshash":"6863c0466352f7a0e657ecfe780237d8a20047b4a7ca6a10cd25c5a0758792d73bf9e2","first_seen":"2026-08-17T01:30:49.760761Z","last_seen":"2026-08-17T01:30:49.760761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-SMW04HSRC1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:05.693Z","timestamp":1786930205693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-SMW04HSRC1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 17 Aug 2026 01:30:05 GMT\r\nexpires: Mon, 17 Aug 2026 01:30:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169298\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497257,"size_decoded":169902,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"bfd59b7fdc2a1f352d0bb445ca85bd4d","sha1":"d17e50ae9a2559a4a1072d13ed5413b347f57b52","sha256":"750e424cc38f515335ca210e69a4fc904fe2256a5be5dece31ea654284a3472c","sha512":"9c1918068bde94fa7ea67a9c73c6f7d4a600bdb5a1038e36e42b4a01541bfe432fe0fc72a3976d66d13e109804d65505d451eceee73ff95b8b9b6e095b094661","ssdeep":"6144:3MoaBD/1ESJaC0XX3iRxnOF7hcgLsegErl3POiDrYMAwbGswDvRN:3zInaxXX+xOdr+wGs2X","tlshash":"13b4e78db3d674625396f078903f01cba57b29a2b45cc89af189cce42e7469a4137f7c","first_seen":"2026-08-17T01:30:49.763305Z","last_seen":"2026-08-17T01:30:49.763305Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":45,"receive":68,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/3.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.279Z","timestamp":1786930203279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/3.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 9005\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01Tbq135:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:4 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:14 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14871-40634\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8982,"size_decoded":10079,"mime_type":"text/plain","magic":"data","md5":"95fe32ffdfb8615ede2f7f142f0fd475","sha1":"c8d3a18aa1f1c50df25a1de98e37c793e9072c1d","sha256":"5902e82fd92865674cc92dee1c2f8d811ff7ed3f3a11b8235a72d8062f0d7fa7","sha512":"51ebdd367e9e77e7a929c9205b9e23409a10df858cd889db6fcce72f91412f6c41e7b52c3e19f7e28e3705ccab5b56054261bacdf6774f757a536cfb0f8d2c57","ssdeep":"384:vkcJi4oKsX2mv1oEQ4+5M1RqkU13r4ZE16D:ccS5Pvwvo4P16D","tlshash":"ef52b01eb103e7da701268e1506906d26354811854dbedd2f7b7e3e1ba6f06c738d7a3","first_seen":"2026-04-08T10:30:19.782644Z","last_seen":"2026-08-17T01:30:49.765676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/4.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.298Z","timestamp":1786930203298,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/4.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8161\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3ce33:10 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:14 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14871-40637\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":8138,"size_decoded":9236,"mime_type":"text/plain","magic":"data","md5":"8e4eea925842a63c49bb891087eec51d","sha1":"c58f0f35cbd6ad4db0788c53cb54e955fca260ad","sha256":"8e619526758e6fb36f6c5fb4c5dcdbc5b2df021c31333b0c90c11b2d67272b4e","sha512":"e39f132355a1c175a301b76042f26eea764b7d0de73bca6a74e63c4f6b35de0b9423e3533d914cc7644c3ae3a14d0e11b24311c3c4a77cd2eed6338946928c11","ssdeep":"192:U5N65o+WQHXpFI17P2jMKeXXVoD0QYnP/VVXAa1EQug2Q5rZgCEzZfjhmJJAgO:U53KFaj2nenVoDZYP/VVwa1p5dE1flmC","tlshash":"8f42bf945a72f324c5d279b97d19688530504ebe13f3bf23d830e665280ad663b7e982","first_seen":"2026-04-08T10:30:19.76733Z","last_seen":"2026-08-17T01:30:49.768847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/__manifest?paths=%2F%2C%2F2257%2C%2Fauth%2Flogin%2C%2Fcategory%2Fremen2%2Ffcsn%2C%2Fcategory%2Fremen2%2Fhsyz%2C%2Fcategory%2Fremen2%2Fhwlc%2C%2Fcategory%2Fremen2%2Flbdx%2C%2Fcategory%2Fremen2%2Fnqzm%2C%2Fcategory%2Fremen2%2Fsfsn%2C%2Fcategory%2Fremen2%2Fsytj%2C%2Fcategory%2Fremen2%2Fzbyw%2C%2Fdmca%2C%2Feudsa%2C%2Fhome%2Froute%2C%2Fpost-detail%2F1010691%2C%2Fpost-detail%2F1031298%2C%2Fpost-detail%2F1043429%2C%2Fpost-detail%2F1069133%2C%2Fpost-detail%2F1091269%2C%2Fpost-detail%2F1115058%2C%2Fpost-detail%2F1142733%2C%2Fpost-detail%2F1169309%2C%2Fpost-detail%2F1174518%2C%2Fpost-detail%2F1176976%2C%2Fpost-detail%2F1180857%2C%2Fpost-detail%2F1196392%2C%2Fpost-detail%2F1202855%2C%2Fpost-detail%2F1212394%2C%2Fpost-detail%2F1214766%2C%2Fpost-detail%2F1218012%2C%2Fpost-detail%2F1223874%2C%2Fpost-detail%2F1231825%2C%2Fpost-detail%2F1231907%2C%2Fpost-detail%2F1233193%2C%2Fpost-detail%2F1233275%2C%2Fpost-detail%2F1233634%2C%2Fpost-detail%2F1233918%2C%2Fpost-detail%2F1233931%2C%2Fpost-detail%2F1233977%2C%2Fpost-detail%2F397084%2C%2Fpost-detail%2F398352%2C%2Fpost-detail%2F420942%2C%2Fpost-detail%2F495410%2C%2Fpost-detail%2F504644%2C%2Fpost-detail%2F727502%2C%2Fpost-detail%2F886131%2C%2Fpost-detail%2F919710%2C%2Fpost-detail%2F921961%2C%2Fpost-detail%2F931888%2C%2Fpost-detail%2F968351%2C%2Fprivacy%2C%2Fterms\u0026version=4758ce7c","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.317Z","timestamp":1786930203317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /__manifest?paths=%2F%2C%2F2257%2C%2Fauth%2Flogin%2C%2Fcategory%2Fremen2%2Ffcsn%2C%2Fcategory%2Fremen2%2Fhsyz%2C%2Fcategory%2Fremen2%2Fhwlc%2C%2Fcategory%2Fremen2%2Flbdx%2C%2Fcategory%2Fremen2%2Fnqzm%2C%2Fcategory%2Fremen2%2Fsfsn%2C%2Fcategory%2Fremen2%2Fsytj%2C%2Fcategory%2Fremen2%2Fzbyw%2C%2Fdmca%2C%2Feudsa%2C%2Fhome%2Froute%2C%2Fpost-detail%2F1010691%2C%2Fpost-detail%2F1031298%2C%2Fpost-detail%2F1043429%2C%2Fpost-detail%2F1069133%2C%2Fpost-detail%2F1091269%2C%2Fpost-detail%2F1115058%2C%2Fpost-detail%2F1142733%2C%2Fpost-detail%2F1169309%2C%2Fpost-detail%2F1174518%2C%2Fpost-detail%2F1176976%2C%2Fpost-detail%2F1180857%2C%2Fpost-detail%2F1196392%2C%2Fpost-detail%2F1202855%2C%2Fpost-detail%2F1212394%2C%2Fpost-detail%2F1214766%2C%2Fpost-detail%2F1218012%2C%2Fpost-detail%2F1223874%2C%2Fpost-detail%2F1231825%2C%2Fpost-detail%2F1231907%2C%2Fpost-detail%2F1233193%2C%2Fpost-detail%2F1233275%2C%2Fpost-detail%2F1233634%2C%2Fpost-detail%2F1233918%2C%2Fpost-detail%2F1233931%2C%2Fpost-detail%2F1233977%2C%2Fpost-detail%2F397084%2C%2Fpost-detail%2F398352%2C%2Fpost-detail%2F420942%2C%2Fpost-detail%2F495410%2C%2Fpost-detail%2F504644%2C%2Fpost-detail%2F727502%2C%2Fpost-detail%2F886131%2C%2Fpost-detail%2F919710%2C%2Fpost-detail%2F921961%2C%2Fpost-detail%2F931888%2C%2Fpost-detail%2F968351%2C%2Fprivacy%2C%2Fterms\u0026version=4758ce7c HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELHp8cZdXUxdioHxSq%2FKyobSfN6TTp9bunZibWqtXh9%2F%2BaZ%2BkPi9Tb3Vu5FEjSRS4bVPxzSXliNI72bZL46UaqQkEOhryg0UYOzY1GhJgGpXU6IXn9CjVYxMiSOyZ0R1zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e94abc9f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6893,"size_decoded":1915,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c7f6bc4d0bdb5e8f45d8513be43492a9","sha1":"58a52e54fe4539817513b32ae4ecb48dc7118b56","sha256":"97d1ed01d34c0de7c323d8d7e08162adb3501c8aa4e8729f49253344d399c879","sha512":"d328c5677cf7002a48fcb1e1337f70da110f48a4991b8180926d5dbd7a2cfa8186cdc2779e745fcb5028453a0553810f052926f9e570bf54f8af4f12a11605bb","ssdeep":"192:qlbGsbIjECqS/jlq+2orzcDH6vDYLIuDL2+fb4hC:qc0IjZxZsGQ76bYcuy+fUQ","tlshash":"bee13b59af113d2d80bc7f85fd2065910ae0b3411f29f8bd9d3ad24d79d2ce20669c3a","first_seen":"2026-08-17T01:30:49.771656Z","last_seen":"2026-08-17T01:30:49.771656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_mm.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.849Z","timestamp":1786930203849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_mm.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 360\r\nserver: openresty/1.31.1.1\r\ndate: Mon, 17 Aug 2026 01:28:23 GMT\r\nlast-modified: Sun, 26 Jul 2026 08:04:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\netag: \"6a65bf70-168\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: KKiIWOmdFE-oa13xiM-61XSXjnK6So7L6fMATktaGMSxCnNxkWcrvQ==\r\nage: 100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":360,"size_decoded":930,"mime_type":"application/javascript","magic":"JSON text data","md5":"d19f12e6c906bedcbb7d676983d452de","sha1":"857a8ec91d321e832640ac0e5a6579a098224a11","sha256":"208a2da0bdf3d033065dd239bfd8be0d6f7224f39efae4dda51289f481b19fb4","sha512":"cbf8704d06d4120ae57e68c3197344b992197aa978e963e2e30f8602f93f68fd9fcee120227e9eccea3b568b374d99848ce71a935eb27fd25b83d611ef8e7d01","ssdeep":"","tlshash":"1de0288e6d737045f0088136861c4f4c543db1e42c1dc76d2e1ca5e912950bae3d4915","first_seen":"2026-08-17T01:30:49.773992Z","last_seen":"2026-08-17T01:30:49.773992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/chevron-down-DLSDi32i.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.340Z","timestamp":1786930202340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/chevron-down-DLSDi32i.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"8c-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XO6FIrRSNdZE3zVM7gCHyJkRScpvE6itS8KEOYy5em1rY5V88a6tFftreyq5xh92mONHmaWFwVyT3344R3uFWE6A4Pra5dvD4pWQkXpr4Mmjd1soDauU5ynxASfH%2F2yUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e9449a9e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":140,"size_decoded":1006,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"337050748bf9158696f456e39e110917","sha1":"f7f6105161d989cf7b9adf1fba55ed43b85d1f2a","sha256":"e00fe2f58db8aa29ce696087f1613a0a9200030d0badafed8b7a73048ac28259","sha512":"16d7f2e75e2cad1472da1b4c1cdbbc319536459bd35e5fdb9de4d6a797b7e31d3684a6ef14469d6f49809d30ae0f36bc3b85bf266a732ee0db44b0f75e270d21","ssdeep":"","tlshash":"d6c02b2f377060b1030c88c9210bb740c8950adc63d04ec4e11dd62fd340cc300cca00","first_seen":"2026-04-08T10:30:19.741805Z","last_seen":"2026-08-17T01:30:49.776074Z","times_seen":2,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/logo-1.png.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.268Z","timestamp":1786930203268,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/logo-1.png.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 4916\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3me38:12 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:11 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14227-17446\r\nAge: 5917583\r\nExpires: Wed, 09 Jun 2027 13:43:40 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4914,"size_decoded":5990,"mime_type":"text/plain","magic":"data","md5":"f2ef4aef519de4f34b6fc95ca8cf272e","sha1":"427db101358e29b574994d3d4b9e78f6fbb8cbde","sha256":"8ed24623465eda826ace9d060302a7c2095784ec05c722d9f5f2f3b7247fa9ad","sha512":"bb38f536b1383d793249ce17960649899939a556c165842e79d7159d7d9b42fde38ec66795af6bc3df9659ac20a0ea7bca353affb8ac0ff103631d3d28fab033","ssdeep":"192:08i6SQORT9IxwKIjqY0pN4JuuCdPhhenEgD:KbQORT9rKIjqYimJ9CdPqEgD","tlshash":"a4e18e0f1392dfad7f69fb8b464178808d122563ebc77868c4c29aa027dacca135f5d1","first_seen":"2026-04-08T10:30:19.79828Z","last_seen":"2026-08-17T01:30:49.778478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/6.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.285Z","timestamp":1786930203285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/6.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 6743\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04l4h128:12 (Cdn Cache Server V2.0), 1.1 ld82:11 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:1 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13245-22506\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6720,"size_decoded":7808,"mime_type":"text/plain","magic":"data","md5":"36d5958d58fd38f3af4eb4ba1105a4b6","sha1":"87005310ef745d85768286c6b7e04a6a45533fea","sha256":"0263b5cbdbb5f0855cac22f7a1883af9d2a712cb19b41ed3f65050eb407fde1d","sha512":"4163d1dbc3b4647d4de3a0b357dc6b779f5a46e90093e3b5ea61d9763b9d4c0c35abe5793895f302f77a3e59e58c55f48871de6b60d134270cb13fcf22dff0da","ssdeep":"192:EH6f0GU81S7inXQqjy4J/TP8toouhm8yrUf4WL195NmIUfqgaIDzve3nm4Iby:Eaf0Gf1s4Q+/TPxoamM4W195I3jDDGmQ","tlshash":"0f22af1bdb0af361a2f644f7d55381f10e35ada0cea77832c616c44116e53d8359f2ea","first_seen":"2026-04-08T10:30:19.744127Z","last_seen":"2026-08-17T01:30:49.780753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/3.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.295Z","timestamp":1786930203295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/3.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 9005\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01Tbq135:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:4 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:11 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14227-17448\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8982,"size_decoded":10079,"mime_type":"text/plain","magic":"data","md5":"95fe32ffdfb8615ede2f7f142f0fd475","sha1":"c8d3a18aa1f1c50df25a1de98e37c793e9072c1d","sha256":"5902e82fd92865674cc92dee1c2f8d811ff7ed3f3a11b8235a72d8062f0d7fa7","sha512":"51ebdd367e9e77e7a929c9205b9e23409a10df858cd889db6fcce72f91412f6c41e7b52c3e19f7e28e3705ccab5b56054261bacdf6774f757a536cfb0f8d2c57","ssdeep":"384:vkcJi4oKsX2mv1oEQ4+5M1RqkU13r4ZE16D:ccS5Pvwvo4P16D","tlshash":"ef52b01eb103e7da701268e1506906d26354811854dbedd2f7b7e3e1ba6f06c738d7a3","first_seen":"2026-04-08T10:30:19.782644Z","last_seen":"2026-08-17T01:30:49.765676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_mm.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.779Z","timestamp":1786930203779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_mm.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 360\r\nserver: openresty/1.31.1.1\r\ndate: Mon, 17 Aug 2026 01:28:23 GMT\r\nlast-modified: Sun, 26 Jul 2026 08:04:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\netag: \"6a65bf70-168\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: TMR88cRMZ-Dme8u1VnWFVXCQ6uKqLXQ7q4DNo8gfuTyvEbqncDKjQA==\r\nage: 100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360,"size_decoded":930,"mime_type":"application/javascript","magic":"JSON text data","md5":"d19f12e6c906bedcbb7d676983d452de","sha1":"857a8ec91d321e832640ac0e5a6579a098224a11","sha256":"208a2da0bdf3d033065dd239bfd8be0d6f7224f39efae4dda51289f481b19fb4","sha512":"cbf8704d06d4120ae57e68c3197344b992197aa978e963e2e30f8602f93f68fd9fcee120227e9eccea3b568b374d99848ce71a935eb27fd25b83d611ef8e7d01","ssdeep":"","tlshash":"1de0288e6d737045f0088136861c4f4c543db1e42c1dc76d2e1ca5e912950bae3d4915","first_seen":"2026-08-17T01:30:49.773992Z","last_seen":"2026-08-17T01:30:49.773992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/chunk-EPOLDU6W-DoW23xIF.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.283Z","timestamp":1786930202283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-DoW23xIF.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"1e6c9-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMYPcz4R2nr3o3i983irYuEKlD%2FB%2Fa8NHSG485MnqrKEbCfMn2jjIQ%2BsclIBn8dV69fdTeYqvq9sng9DMk%2FzMXDLJhxW17jb%2BG4JQDObE0h5PEqZ6QdMzB5EpgqqPkVj3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9443a6e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":124617,"size_decoded":43364,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46763)","md5":"4ce2c6dfd9e21619915061240473e543","sha1":"07251c0eb37fd17ab7cde9c6eb1b4accd82e9c07","sha256":"fb2aaef4b434121ed3ca27da72935b05b3a4e7e73945054e8daf46c1f7ec1a43","sha512":"7f6ca8729326519a3ec0d35ab3854193490a5237a371ac639fcdbdf50fcf2f6a38e44168a4060822b4abe6b2d024210b0fe1ea8687c9f656bfe4cfaef519f21e","ssdeep":"3072:1MM9liG+0lAPQz0eat+1RBXSXg8JYYWEU:1RV0+lSXgsYYNU","tlshash":"ccc33bf97292b0754bef13f180bb0015b3ba2ca9245d8015b2acd99f35b5c08967bf79","first_seen":"2026-04-08T10:30:19.835332Z","last_seen":"2026-08-17T01:30:49.782979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/middleware-BecK8QcD.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.341Z","timestamp":1786930202341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/middleware-BecK8QcD.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"716-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHqCUwHGmGQQK4a2M6CFvDcmEWgKUs69dcdMIZNptrHXs%2BRrB8%2B53v%2Bka3WeUhqG77THUtYBXnimE2HweVjU6tXKZLio7Jaunc68GMw1eypocQvXvCWEAnzEZjO%2B4ebSgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9449a9f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":1787,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1813)","md5":"365e63fb510a7ef98d404851a9ef797b","sha1":"e3ed5f6e770fd44eb535ab7d8d9cd1d14b258bf2","sha256":"f0988d2d2bf31af364290cf65d0923f72004ed12d1a17afb27da560a321be805","sha512":"0102ba83bcc05b89ea8beaec4ade64d06846d28799637ad8708d12c6e1f6467d7720f4118346d5d3e9378e106d30929dd06b2de515362da361ebb03ae6c32965","ssdeep":"","tlshash":"433164cab2e3e1702fdc124e84be91b6f7299564311dc451d11fef0a390698ac27ed7a","first_seen":"2026-04-08T10:30:19.754897Z","last_seen":"2026-08-17T01:30:49.785494Z","times_seen":3,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/home-dzYDB9LD.css","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.350Z","timestamp":1786930202350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/home-dzYDB9LD.css HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"256a-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=425Ej3HXvBRoYLCrnEGcC9mTKtAP%2FVjL8Z1uA%2B53bHtVbTptPFlaYOdPR9taU1pwBcriIXO61araX1Gmc%2B5LwKNPjS4hpZ1YK8mxPToKC5GhBxCfCWJ1nXpQwAfDd1VMpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e944aaaa5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9578,"size_decoded":2731,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9577)","md5":"f77dc93ec2d2a87fdfa29ba8077b319e","sha1":"0a202cb05ae769f1e8fa4085742067a750cf6db6","sha256":"f664a85605081038886b64b31b82e679ada0f443520e3fbe03eb50a85804100c","sha512":"0b513aead2e12bfb89050bfc434f9da4ec8cc0be9813d1efeba954373b615330a23b90599450ab935aa364d6c9e15ed5212304c3809f8253ccd5b16121ecd08e","ssdeep":"96:9JToin5dX2TaSWIe+jeHPdw297fzrEIuBkyAKb69CQNIUMY5IsJnYIf/OY:9JTJdXCaSte+jeH1ZpbRyfb691NRvOvY","tlshash":"14128c985310281393134f3257b58bb4dab448914bd3ce7e91c0ad98c6fadf9276f2b9","first_seen":"2026-04-05T08:23:45.97262Z","last_seen":"2026-08-17T01:30:49.787742Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/2.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.294Z","timestamp":1786930203294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/2.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 9461\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04Dlo138:6 (Cdn Cache Server V2.0), 1.1 ld83:13 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:4 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13370-19226\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9438,"size_decoded":10525,"mime_type":"text/plain","magic":"data","md5":"e91201e2d3e42ea36e8a4ad7b9dc9fcf","sha1":"d2e01c21d1ba82e26d2c583a919960a8d18060be","sha256":"9266801231ad03115d098ea3ea955dc16731b6cce06926dab97933a2be64b84e","sha512":"945790d77a2ef812c74c2e8ebdb2aab14eafdcf5fafb1e796a21a1056f4c9a3132feb03441da9ed736b83fe0efb5bfd24b69d19a6cd130b3b6b580e4062feaf3","ssdeep":"192:0TYEULUKunwapyxnEV1raOULzQRw27L7tXZcjUR0geeeqLg5Zn6XmSiDJTBvnaZS:00VQ5Ta7GLOKeq0PnyMVuBc","tlshash":"3e52af479360ffa8425b0dfe5a9842e4712ad5faa21e5c10c922dc706f6b6de33cc890","first_seen":"2026-04-08T10:30:19.781124Z","last_seen":"2026-08-17T01:30:49.791469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menus/novel.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.309Z","timestamp":1786930203309,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menus/novel.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 4381\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3ff160:1 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:11 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14227-17449\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4358,"size_decoded":5456,"mime_type":"text/plain","magic":"data","md5":"3918229e87f2c28258132c036b8c470c","sha1":"5f1d9290d68111aec8c55ff6a1182b905e646570","sha256":"07834caf3fdc19bfac6a1b0005f9d2326946a2b082f68ab3b5e95a68cac25530","sha512":"6b0702344c05a922dd7fd30078d114135f5cc9969d56c769523172f3fe4d14d14c3742be3bfa14713be61f672c39440c44396cb1f10cbd2e21d0fd875409de6d","ssdeep":"96:Y74Pe9vvUqAdO6MsERUDb5V1ijI4BY4j8WmVRTK2j3niMtNcwWdKxSTJ50wPszOD:Y7RXUqF06k5VaG/WmVRxDn1+1luwPgPK","tlshash":"39d18f0d93054bf357cec89729423ead499c7f1adb99b910c53491063cb54bb272fad8","first_seen":"2026-04-08T10:30:19.799584Z","last_seen":"2026-08-17T01:30:49.794247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1766568924695-338436171.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.570Z","timestamp":1786930203570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1766568924695-338436171.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 101658\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2xe32:5 (Cdn Cache Server V2.0), 1.1 ld86:6 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64507\r\nage: 3519466\r\nexpires: Wed, 07 Jul 2027 07:52:17 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161643,"size_decoded":102695,"mime_type":"text/plain","magic":"data","md5":"d2c2119d025eb2b781a09aea900227d8","sha1":"ba1680dfaddc62842be7ce3146e2896737ed6f39","sha256":"9eddb09501ccaf6ea16e1806a422f4b71ddd6d178964d70b45583320f8ccc34f","sha512":"138812bf7df044a70f2cc0236e703747af4b15025db2f73898d20a224a9d60e1e9b9e84c9c529b4d105232f6e4eec95f70823c725c2d92be683874076a983437","ssdeep":"6144:uwp3GuUq/5+mUqZzhBUqYb3UqBl2qz8BOCHYLBOCF/WJBOCAj/uBOCdzR:uwdvc0Z9bYb1/lkOEwOicO6OmR","tlshash":"36449e1e9261d7f5b51badf4fa0138c8f4009378c3c79a50cd6584a22a9791cbbbece5","first_seen":"2026-04-08T10:30:19.74762Z","last_seen":"2026-08-17T01:30:49.797045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/1750138112678-953712345.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.629Z","timestamp":1786930203629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /1750138112678-953712345.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 24101\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04l4h128:14 (Cdn Cache Server V2.0), 1.1 ld86:5 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64516\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24420,"size_decoded":25139,"mime_type":"text/plain","magic":"data","md5":"4a416375940b0e343151787ce8288ed4","sha1":"c5dc55142a2219da5b235a4147f7f3d0449ca2d7","sha256":"3f5748331e539f49865ca5957ab4d036649517202dbd29a83c092cf61ed47a31","sha512":"129cdabc2bc28646174be4f882ecb960d9f151d3e3ead7469d41556aa85814962aef2fc82821627e76c06ca48ccaad640d170f1901c345bada42eae353d94b07","ssdeep":"768:pQWzRkPFbRcoX7sN0HNBI/GVnhTbqtPrNxB52N4lkHCaOrW6ERh:p9qNbGI7qE1nh+V3xlGiW6ET","tlshash":"27f2bf0d03a0f3d5d29bacf4a60534d4aa818bd9e7d26b90c851e0a5a683ded37fd9d0","first_seen":"2026-04-08T10:30:19.819869Z","last_seen":"2026-08-17T01:30:49.74268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hwzb48.cc/","fqdn":"hwzb48.cc","domain":"hwzb48.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T01:30:01.437Z","timestamp":1786930201437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hwzb48.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 08:36:47 GMT","end":"Sat, 14 Nov 2026 09:35:35 GMT"},"fingerprint":{"sha1":"C8:F7:CF:1D:06:F7:77:F5:95:79:43:3F:D5:A6:15:7A:FF:F1:26:84","sha256":"E6:AD:15:E2:C5:C7:4D:C6:AA:F0:1D:DB:34:AD:78:F2:0F:35:3C:6C:93:DD:7D:71:29:0C:33:9A:01:5E:71:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hwzb48.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Mon, 17 Aug 2026 01:30:01 GMT\r\ncontent-length: 0\r\nlocation: https://baba.jchc47.cc/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3%2FeVOMCHGMtYPVdDggsIgzEwGydtUCylz6jcm6KjFKgaUUbyRwHy7q1fxH2%2BQvDlt6B4wIdOynKWtszAsBBHsGIrKMT4aqFiaK4g3kpSbCSY4gw%2BLahBfyjBS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-ray: a2c4e93f28b349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T03:12:38.174733Z","times_seen":17928789,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":6,"connect":17,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/userStore-CTIvKSxf.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.331Z","timestamp":1786930202331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/userStore-CTIvKSxf.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"402-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4c6aZFYBidQ4oJ0Qw%2Bwl86Z0qbcpOfSltce9twzpDF2uf3XGf32kit2w%2BLl%2FUPvhGNoZanyVlqBw0gu8slB%2FfHZrQnsejEfgcHbgcjcyPl8nCwwELkL%2FxhH0%2Bf1na3h2hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9448a945685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1026,"size_decoded":1368,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1025)","md5":"09c22ebd70fa05d1941e1f9b90675cfe","sha1":"f8b9b820e1402173988e59f579747800ebb4bfa3","sha256":"98fcc3ea6079da9350f10a53faa75237317ec90dbd7fc814ce250300d794a53b","sha512":"47420c53b7abeee4bd6531538e1ad7e773982f8784e1b6a4db9198feb801cbd5c36ec5e166aa3da707383731a0f3f23b460a86468965dc5cef7eb5b3ab52f276","ssdeep":"","tlshash":"4611ef1c8a81867443d51efea64092f0137c067021de8fa074754eb539fc6ca92bbe7a","first_seen":"2026-08-17T01:30:49.800648Z","last_seen":"2026-08-17T01:30:49.800648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/RecommendURL-DheZE40I.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.346Z","timestamp":1786930202346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/RecommendURL-DheZE40I.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"3ad-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ1%2F5wvV1zLrVrUYa2GHfUcuOjptN6ugNKmtz%2BYaKZD3N%2BWtsGDQrev07nrx3jcydz%2F0D0pDrykbyIlnEK2kCUQNb972ty3TYP3nAzfJODlp1NtU2BN6vhBidI0S6JWoPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e944aaa75685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":941,"size_decoded":1443,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (932)","md5":"26d506b6754343e7faeb3b41260c6a87","sha1":"da9434e5cea1c30c2e3b7b053b7693d998d85c4e","sha256":"f6df4638b231e3b53e0997d80f985d53db95ede3f93396dad7327eb08ed892e7","sha512":"ee4c8646d23bf47d67bb8edcf3f8c62a0354f8bf5bbaad689d4778ee64746f0a7e76c3ff2d8ad7cf02297585730a2203e1804943fc2e0881fa17c2bec169d699","ssdeep":"","tlshash":"4d119b0ce041effda86718c4991d501c71074beedb7e48a1b1bea00002645777a6b3d9","first_seen":"2026-08-17T01:30:49.802992Z","last_seen":"2026-08-17T01:30:49.802992Z","times_seen":1,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/6.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.303Z","timestamp":1786930203303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/6.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 6743\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04l4h128:12 (Cdn Cache Server V2.0), 1.1 ld82:11 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:2 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13311-41056\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6720,"size_decoded":7808,"mime_type":"text/plain","magic":"data","md5":"36d5958d58fd38f3af4eb4ba1105a4b6","sha1":"87005310ef745d85768286c6b7e04a6a45533fea","sha256":"0263b5cbdbb5f0855cac22f7a1883af9d2a712cb19b41ed3f65050eb407fde1d","sha512":"4163d1dbc3b4647d4de3a0b357dc6b779f5a46e90093e3b5ea61d9763b9d4c0c35abe5793895f302f77a3e59e58c55f48871de6b60d134270cb13fcf22dff0da","ssdeep":"192:EH6f0GU81S7inXQqjy4J/TP8toouhm8yrUf4WL195NmIUfqgaIDzve3nm4Iby:Eaf0Gf1s4Q+/TPxoamM4W195I3jDDGmQ","tlshash":"0f22af1bdb0af361a2f644f7d55381f10e35ada0cea77832c616c44116e53d8359f2ea","first_seen":"2026-04-08T10:30:19.744127Z","last_seen":"2026-08-17T01:30:49.780753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1770042216647-371577867.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.566Z","timestamp":1786930203566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1770042216647-371577867.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 126998\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2dy113:3 (Cdn Cache Server V2.0), 1.1 PSygldLON4ad27:2 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64505\r\nage: 3223570\r\nexpires: Sat, 10 Jul 2027 18:03:53 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128882,"size_decoded":128046,"mime_type":"text/plain","magic":"data","md5":"f70094b8fa27f935206eb4611b82889a","sha1":"51335af6a58138c21edf70aafb60e4e12340ff6e","sha256":"d238b5ff87dd2bbd7837ea8731d252c9b9bb32bb7fd8551e9e951d1b63f8c230","sha512":"6b5aae55c1f1ed08c4759c5dbc3996d42cb2d586694a9374c4cbe90cd97faec55eb7330d13d5e3ff0224dac4bd83aee94b463090e4f06079cc40e5024133c3dc","ssdeep":"6144:/M6m/+qLZal8X/PIBy+kQBA/xnsr3iFGpWuyrhWgN:/Mp+q1aGPIBEQBA/xsr3eiwrhWQ","tlshash":"5614cf0a53a2e3f19567acf4b90125d8b90457b8d7da6e60cd6885a03c8742c3bffde1","first_seen":"2026-04-08T10:30:19.843258Z","last_seen":"2026-08-17T01:30:49.805391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/1760249815373-665994968.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.572Z","timestamp":1786930203572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /1760249815373-665994968.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 34958\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2hv116:3 (Cdn Cache Server V2.0), 1.1 PSygldLON4gd24:0 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64509\r\nage: 3519472\r\nexpires: Wed, 07 Jul 2027 07:52:11 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83403,"size_decoded":36005,"mime_type":"text/plain","magic":"data","md5":"9829a2a5dcedf9b47de369b5f914dce3","sha1":"435b68c514bf4b9262754815f430ee660d3a4c95","sha256":"520c2d71115950c9ccdcfe588d763876f6c562d4aa427b2dd521146f121d1b06","sha512":"d1d177857fda7e41f80f3c3e57a47b53d604433b1e705a0f3c22e388ffa5f028b6e11b59b8de621322e0306177d1cc2bdb1402cd1fe327fa4d680f65f746e9cb","ssdeep":"3072:2Zqw4NPiAgeMcNPiAgeMcNPiAgeMcNPizvojwAyf3ZLAyf3ZLAyf3ZV:JwgqZeMcqZeMcqZeMcqLofyfWyfWyfT","tlshash":"8bd3ad564351f3b4a407bee8be003ad8a54192f8d7d9a760dc24cab07887c7c77ad9e1","first_seen":"2026-04-08T10:30:19.811608Z","last_seen":"2026-08-17T01:30:49.807577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/uiStore-D1xMnVIo.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.335Z","timestamp":1786930202335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/uiStore-D1xMnVIo.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"32b-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeWhjEhd6pWq43zxRkegczHpAqBaOE6NqQK7FS0K7aA9uUdJZ4BkGSnVmjKmZOf0eYtFprs0%2BksZzlJPo2gPtFDKQPkRcCzTArl0drNOJFzlmnxWD0EETUandhUMffy4Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e9449a985685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":811,"size_decoded":1253,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (810)","md5":"9862d3e9c6cefece58a91369e8bdc77c","sha1":"207c6a422e587c87578c07577f1f7160f72b14b7","sha256":"693726ea5bb702de1fccc3be499f259f37be7343496807ea62863670ba298697","sha512":"aca31dceb544101398dbc6f98dd03713931804799c23e17afeb5fa11292ae8a34703d764ff29156444256c7b504a8d4c622d7fb2db34dce9999e10f45b68d5cc","ssdeep":"","tlshash":"ee01ce7ac81a6beb8cf21355cabca3f28b519814f36701bb151f132f104c50179b0e39","first_seen":"2026-08-17T01:30:49.810215Z","last_seen":"2026-08-17T01:30:49.810215Z","times_seen":1,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/scriptDataStore-BVkpUaUy.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.337Z","timestamp":1786930202337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/scriptDataStore-BVkpUaUy.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"1e8-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5ietvYieOKv830wvJyGYnacU8Sr%2FuqqbttfHvhcgUzQo4uWYPnDne2h5j38Iho8r%2B%2BsBM7lxo7u9EGVe8BXzJMYrWuyMkwbTbQ%2F6VKVJMgponOe4bT2V8YeiW3t9QhJFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e9449a9a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":1143,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (487)","md5":"f64f952d014f35cec28b374b5d797e3a","sha1":"3f7df76d313fd170626cf30e6311d34721d35c48","sha256":"80940deddb63c86a1f048cbe7fcb61d7f59973159b1fa810955094f97bb774bf","sha512":"d35ee4a5454ccc8ffe1be6a35b887fc4036a405c573376bb850687448ae3e510042b494f8d67e6f98652574c00eba138a084760b6a0edee88d8282bd6c410562","ssdeep":"","tlshash":"abf0e2963c08b778604d2d78027ce687c7d4b50ce2b981a11c66e7eca7c4cd1361c744","first_seen":"2026-08-17T01:30:49.812141Z","last_seen":"2026-08-17T01:30:49.812141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777640099981-991348115.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.568Z","timestamp":1786930203568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777640099981-991348115.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 62896\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2mg31:5 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64504\r\nage: 3568707\r\nexpires: Tue, 06 Jul 2027 18:11:36 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129794,"size_decoded":63942,"mime_type":"text/plain","magic":"data","md5":"f71b51b6d2f2f1526d85a9b52f704144","sha1":"1512db5f3622949892948d23d9d4e233fa0346ba","sha256":"b5542dcc82c7b7b8f54307a9de2d1366c9f5dd186e455a36109e53f87f30a78a","sha512":"8088159ea590f5210bab2c1fad097c11638b96ba8adb01bc0b8b83b04cec415d56e3ae67cb6d2025e081614a03931fa6c02fe0ce602956e3726d257b1ddf59b3","ssdeep":"3072:Lcbk30taX6pnuFk30taX6pnuFk30uWYsXJ/JKEoFG8vsXJ/JKEoFG8vsXJ/JKEQ:LKwC9owC9owur/wG88/wG88/u","tlshash":"8114ae2a5391e3f5a187bcf46a0135c4b501cb74c7eb7ea0c962c5a17a4b52cb33e8d9","first_seen":"2026-08-17T01:30:49.81406Z","last_seen":"2026-08-17T01:30:49.81406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/5.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.299Z","timestamp":1786930203299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/5.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 7381\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01bbh129:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4ad27:2 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:4 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13370-19227\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7358,"size_decoded":8454,"mime_type":"text/plain","magic":"data","md5":"067c515c77a6232d5e92c1c5e6d02b19","sha1":"a4799f454ccc7b40955f6bc49ca58f711ba24ca1","sha256":"ac90500021f480f7a3ff20a3d0f8b0acf30198bc4370f1a9b3c7100edbbcc938","sha512":"d154770d933d36d8e3cf0302abac95a55b661fcf627d02df4d5341544b1a8f4788fa6cfad491a71f33c36a21a36f830ab71bd43fe44a98742650c1810edad96c","ssdeep":"192:hrf9479UnXcBYVKHzr18fVJnB2JKGJn1x7QA1HDEk30zvXdN/v/GBLDqtkhRUN+Y:FQYkGfTB2JKG/DWzVlv23wup6eS","tlshash":"e332af92a3e5774182e34d76e44207c5cee12d70b6c6b1e5eeaf04617e6813c366e287","first_seen":"2026-04-08T10:30:19.79029Z","last_seen":"2026-08-17T01:30:49.816109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menus/download.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.312Z","timestamp":1786930203312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menus/download.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 5105\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2ce30:7 (Cdn Cache Server V2.0), 1.1 ld83:13 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:2 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13311-41058\r\nAge: 5917583\r\nExpires: Wed, 09 Jun 2027 13:43:40 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5082,"size_decoded":6168,"mime_type":"text/plain","magic":"data","md5":"8d64bd903a50e5c5c8ef54417f8dbc25","sha1":"be76dfb33798e5cecddb3209c0af97d996dda46d","sha256":"69b91fda5d3d3e4242d7993641897c094dacad7e8d1bf05727d3e41860a3070c","sha512":"8381f5622d32d3ba33e530eb9d4f25b3212bed499609376ed6846e949b3ec962938cebef30d4a9310652362623acecdf8bfae3f0a342d294244822a7f7991097","ssdeep":"192:rtU/XuK2IV9mvGDVxWwzn16b9WkCiBweULZLd0v:secKqJUbvw3LZLqv","tlshash":"19f1bf229810f38855fc99fa4d8323c6901a495efbada9a0c90cec232fc654d972d0f6","first_seen":"2026-04-08T10:30:19.769007Z","last_seen":"2026-08-17T01:30:49.818169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T01:30:01.534Z","timestamp":1786930201534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=0,i\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, no-cache, s-maxage=300, stale-while-revalidate=3600\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' https://hm.baidu.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKm%2BDHAKImO8oRD8Tw54JEpAQkaCbm7ot4twxKgw9wlFyiJ3cF%2BdnrI1KkbfF4J5rkV%2BYTAPr1HfZ4fGJDq8lLIicKjl%2FU3Ss6hhHhZyFjAxCn9tcBztsTpXX3P1WUihqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e93fd8ef5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2256022,"size_decoded":40922,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65004), with no line terminators","md5":"fd7f96b24936d925a971289fa3ba28d7","sha1":"e96a750c2b0403db0c4b12d4b794b84a87e905de","sha256":"492a4ff99276524052aa5d64e6b366118bb947abff32561c8bf4d04293d2cf73","sha512":"1273edd65230c53e1c52e85d299b53b9e35f928b666cfbb986790e95450f880dac008f9e216457784b3c9245ead648258e4b3a64a0a849461770506761374ecb","ssdeep":"6144:s8nIrZZZP0zvor96lqhaqdNVNNdXXC7dgL0K888gwxPixEE0CftIKu+7xFsQ:Y","tlshash":"4825e1bdf0dbb9f74f7e0f72922e656d0db55d2794300880a3c9e8b053ed46758a6482","first_seen":"2026-08-17T01:30:49.82026Z","last_seen":"2026-08-17T01:30:49.82026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":0,"dns":20,"connect":18,"send":0,"wait":471,"receive":518,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/QueryClientProvider-C6AG8QPJ.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.287Z","timestamp":1786930202287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/QueryClientProvider-C6AG8QPJ.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"355d-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHwvKHnKfwy%2By%2Bd09Y8o%2BTrP7%2FA4qK%2FNt346Bd%2FfeiHFzcHT09FasIhIacPW6elp7pqYlPoSEoZNbLHhXlNa8XLOt792rCsxtc8BQVmzyh7B8qG1kx%2BY7EBhArpNhAQy9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9444a725685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13661,"size_decoded":5835,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13660)","md5":"e865067109f8bfc7e9aeccf1b24d13cd","sha1":"0081490537665ec62fe9e61338dad88dca2f79b9","sha256":"5d4bacc12d71cd8b9bbf2cb43e05e9fa396467448af2ff7c3c336b20a669d8be","sha512":"6dc2e932de05ea76feba7c736f53004c4b441223a1f37ce3827270cf8cb4498f834082f13d5a603269db47265676b31fe07538f3b4e1b787edc0c435907b3fc4","ssdeep":"384:fQVS7PlRChpLI30KWhU+zEeYEpV12fFW8gauIvsGJ60cn27zB:IuPlRChO30KW5OEH12NW9IvsGB3x","tlshash":"9352d99a7286a1372ed1c195442f5126f2246800740b806cb9bdbdf6f973dcfb4bea34","first_seen":"2026-04-08T10:30:19.740226Z","last_seen":"2026-08-17T01:30:49.822065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Image-Cp9sorVE.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.330Z","timestamp":1786930202330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/Image-Cp9sorVE.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"4b27-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1D12cKccoG0Sk92YI4GngyWhnuWIxFi%2B%2BIRw4F58rdf0VJ05wFhZ%2B5%2FLoIAsiX9%2Bicl1P31Ls94LbWaFxLqLrh69LZFKeLwazqVciyl7p54JXvUDtmaTBxIzofumrukouA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9448a935685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19239,"size_decoded":15049,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19238)","md5":"2dbe976d7a9639b02ef4b2d4c22b5d76","sha1":"003623a395b4459f349a3747b17f3f7dc6be7800","sha256":"653ac02a473db89418cdc74111f5110db3142759a0a226b3f91fbcd9440c13fc","sha512":"8c22b550dea0a759d1cdd5fce0a745768ca453cf5addec3b3d29aa70c3aca099b3a5c46f59dc191364b08d6c39056dd4d639f76fc9fc4c09aea69ef3dc50573c","ssdeep":"384:bRd3hYtjEUUTqlXb92+Ir/H4pSaZp2Q0lpr2wpw0R/cQYau6iqpC3pDRD5/INH:bd8E34b9jIbH4pclpr2wpwCkl6ns5J5C","tlshash":"0282d0fef0cef4f68b6d0971822d55a94d695c2b21340585b3ecbcb062ed05b94a74c2","first_seen":"2026-08-17T01:30:49.823774Z","last_seen":"2026-08-17T01:30:49.823774Z","times_seen":1,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/HorizontalAds-C53IWSLj.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.345Z","timestamp":1786930202345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/HorizontalAds-C53IWSLj.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"244-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBHiCwWy%2FBqFyhc2UqCnvQdt26GYcsWqWd3ZlbEwh8PYZ1BufiqRz7DOLH5Qos4B6B8yed%2F%2BH4qKY2Qabhb7i57gFMq6v4lERbu6xIhXk5DIM510v9IsVngbkLaqkxeXzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e944aaa55685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":1250,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (575)","md5":"dba5c8d9b435c8e84d85c0df88aefeb5","sha1":"6045f7cfc58d466bf70c648d13c791b1ac417b21","sha256":"0c6a1dd92181ef6f8c2318c667c71badc29b38652a9aabfe4280831460c86efc","sha512":"f7e66393cc441c465b8aa8e7c186d5b71af243d537489b8b64ad91a73467c0b4c76f481b65ee5bcc3d606675474cbec3dcd4d1d452335b99eca31c96f4549f2c","ssdeep":"","tlshash":"0ff04c0da010bbfcfc758dc98dac901830130fd4db7e49a2607974010634a677a17b9b","first_seen":"2026-08-17T01:30:49.825962Z","last_seen":"2026-08-17T01:30:49.825962Z","times_seen":1,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777111090136-284097987.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.622Z","timestamp":1786930203622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777111090136-284097987.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 779156\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3lk159:2 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:11 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64514\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":784280,"size_decoded":780205,"mime_type":"text/plain","magic":"data","md5":"cdd5bad8cf0d0a7ed8bfa70c1758abd5","sha1":"a409eee31b654ac45131210f5f9425f55dd1fa68","sha256":"785612e83d6fb9dc35f6cad1a95f90cb3312fcee3f82a54422a1e17e59bd1b0c","sha512":"5d8183c7a623293f07484ef84a22bef5fff4b47b2219125555ae3a309be98bf1c286365e020ab7e09e3bdb762de854bbfc5c1e2e8010cc4597d6ec46f9e3f3e1","ssdeep":"12288:LQOR0Kj+sAq4kM7bT37kM7bT37UMI/LGHCi5tehmNKFBrQfUxR4qAFDI99KBrThB:tRDP4k9BVtbbKreZKeP1hn+MJAHdFjl","tlshash":"0245c00a5351e3f0e11bdcf9a90126d4b50087f8d7dbae60c924c6a1399781eb7bf8e5","first_seen":"2026-08-17T01:30:49.827643Z","last_seen":"2026-08-17T01:30:49.827643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777110678904-358576313.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.632Z","timestamp":1786930203632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777110678904-358576313.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 602108\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2ps111:8 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:10 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64518\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":608812,"size_decoded":603157,"mime_type":"text/plain","magic":"data","md5":"214aac1a078f26a1720fbd4544d861d2","sha1":"629280838b0de859ae07f38c507295722c7ce021","sha256":"3b00114ab7bfbc428d6cb9060b3b24f48c2057b92067d361c16bfd0403987303","sha512":"f38ceaf1a941a38cd54ccc60fd3ac66e74854e87cb7d674351b9ac02cb6d59028a1006b469988cc1b9761310b29f3808b4d0c98f917120048428560c51020c3b","ssdeep":"24576:cEgstfE91mKj8aFqeG0QrQiDfvLVoMZPMxtxUmCe:cEJ01mKj8aFqeG0QrlDfWOPfe","tlshash":"7b15d00a53a1e3f49127dcf9b90136d4b50047b8d7eabe50c81586a0399b92db7bfce1","first_seen":"2026-08-17T01:30:49.829797Z","last_seen":"2026-08-17T01:30:49.829797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/mutation-Bbn4P6Bc.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.288Z","timestamp":1786930202288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/mutation-Bbn4P6Bc.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"d4c-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6PJVWObODINBphC3P2r0oELztgzecMN3S8hThJ54z%2BzW1mtrWsBWrpyoZrS5zPRODqVF5tzcHhVnzoIfOcAgjnpWuci%2BBnKFSY%2FATxww6dy9ObDZPetXCI8VxI76FpnzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9444a735685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3404,"size_decoded":2053,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3403)","md5":"58b72439dfe6f3c75aeb002a4a156353","sha1":"a2a5045a045c47382abd813a642cf36eb55f7183","sha256":"7bd6373c32c76f906ffe4d368f15d10b51ed960bd4d176573b63dfa40564c480","sha512":"f4b4f434ea348fc9677dcf4c4f3f93680cc82bf309a4e398b91857b5d09634b947a80d49d7a9f1982a18ef047c0249cef599807930805f89898c919b4156442f","ssdeep":"","tlshash":"1161539b7116126b7ec245d1981d192850389228ac52953c79bd8bf7f0864cdfceffb4","first_seen":"2026-04-08T10:30:19.776601Z","last_seen":"2026-08-17T01:30:49.831711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/createLucideIcon-Cwz2P9OQ.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.332Z","timestamp":1786930202332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/createLucideIcon-Cwz2P9OQ.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"4bb-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVnZgPBdaMMuSPiXIsCV1xZnYJbrYvgIKQGx%2BRZjmYvPH9ZBDhbiWowDFKy1RTvt4POcO8I4SmmkZksfAipgpDGyngNQalRn1fzAj31RiLsD8h3hwJPnjCEuGW9XJwhgBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9448a955685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":1559,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1210)","md5":"902d36857947d5afca867cbd3209dba1","sha1":"2ff25b1a8689445aa770c014603090034ed27196","sha256":"65e05a7c89cd653fb8fc03304490f64659b1a88911bce2db8d859773e13fec12","sha512":"3c4994668bfe3efbb4db7163492628fcbe4f499751f3dddcbf23c9eb687351dc49f4875ad41cd51cfb36847fc6d27fe821190ddb0c4acaddb57cad640b179089","ssdeep":"","tlshash":"15214408b3d5283ca23584dd96583169fc779a18f9635a58d2fc5d1b7627142a333acc","first_seen":"2026-04-08T10:30:19.814517Z","last_seen":"2026-08-17T01:30:49.833642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Modal-BY07XhWn.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.334Z","timestamp":1786930202334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/Modal-BY07XhWn.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"6ad-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ozc7CZrQDlhTj87SkUeZ4yBbPmMl%2BsvHPMRKBfAFHpTyDxh8TTwGSrbpj09a5%2Br6mVi%2B5yWRQbzNSneA7PU24wgMZmy4Yh%2FdVx6XlZnXxx3qXyIb88OCAZ2Ub99s1a86Gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9449a975685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1709,"size_decoded":1660,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1692)","md5":"0537e26a0c74824d9716e1a7c3d30855","sha1":"c64622f34091dc104e3850f2afc630126cc60429","sha256":"787754745216383e1fb1339c7086e9e3a7d17ad947b5f578bf32da84b3eb5035","sha512":"d74dadb9a4cbd0fb67dbd322d39ae921cb3f7a625be824ae82552f4259c2e01a1450e8656991ca20156e7ab6b317c2bb711e71fca633bc1dc4e18ec563d2bac0","ssdeep":"","tlshash":"75318812a10d9b08f447857d717e5a08a053a85cf7264fb5e31e643715e0c737b6e3e2","first_seen":"2026-04-08T10:30:19.779084Z","last_seen":"2026-08-17T01:30:49.835862Z","times_seen":2,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/5.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.284Z","timestamp":1786930203284,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/5.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 7381\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01bbh129:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4ad27:2 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:2 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13311-41055\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7358,"size_decoded":8454,"mime_type":"text/plain","magic":"data","md5":"067c515c77a6232d5e92c1c5e6d02b19","sha1":"a4799f454ccc7b40955f6bc49ca58f711ba24ca1","sha256":"ac90500021f480f7a3ff20a3d0f8b0acf30198bc4370f1a9b3c7100edbbcc938","sha512":"d154770d933d36d8e3cf0302abac95a55b661fcf627d02df4d5341544b1a8f4788fa6cfad491a71f33c36a21a36f830ab71bd43fe44a98742650c1810edad96c","ssdeep":"192:hrf9479UnXcBYVKHzr18fVJnB2JKGJn1x7QA1HDEk30zvXdN/v/GBLDqtkhRUN+Y:FQYkGfTB2JKG/DWzVlv23wup6eS","tlshash":"e332af92a3e5774182e34d76e44207c5cee12d70b6c6b1e5eeaf04617e6813c366e287","first_seen":"2026-04-08T10:30:19.79029Z","last_seen":"2026-08-17T01:30:49.816109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1766727429229-144242704.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.569Z","timestamp":1786930203569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1766727429229-144242704.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 37936\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01ba4130:5 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:0 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64506\r\nage: 3519466\r\nexpires: Wed, 07 Jul 2027 07:52:17 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77386,"size_decoded":38983,"mime_type":"text/plain","magic":"data","md5":"13571808e8e0f8bbea338ae88a3cc22d","sha1":"993555f9f4fb21b4f934c4aa520650cd1bc571b8","sha256":"c23f080e567dacd384c880851feb5cc6b03c3ba9404142b98430631b2085e0ca","sha512":"aeae6076c0575f104001bf1ab6666bf26bde81e40c469e917231a57c150b6e28694c0a7041148e5b589d70950682e4fe0b87e314e2e586b941b3a562868a2aea","ssdeep":"3072:Q0MVXAybukbukbuKxb4mAW25wV46DDDHHg5wV46DDDHHg5wV46DW:QOt33IEmAI4IDDN4IDDN4IW","tlshash":"26c3cf0e0355e3f8a127e9f6ea0238c69501c7aaf7d65750c51a8aa03d03d0d67afcf6","first_seen":"2026-04-08T10:30:19.832876Z","last_seen":"2026-08-17T01:30:49.838459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777358366869-699911400.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.573Z","timestamp":1786930203573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777358366869-699911400.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 65154\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3sj161:1 (Cdn Cache Server V2.0), 1.1 ld81:13 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64508\r\nage: 3223568\r\nexpires: Sat, 10 Jul 2027 18:03:55 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303206,"size_decoded":66192,"mime_type":"text/plain","magic":"data","md5":"db2ecceb4b33d8613a933a0fbf150a4b","sha1":"a2e69dbb4d0460eb1103bba23874c0750c2789f4","sha256":"0dfdc3d7c952a0ffd418b0a34e39b32105232295028aa655ac303bf97d7bc421","sha512":"bdf6c410d9c093e49cb58a50985a27cc712557b06d8c87c25484186c42d2901b8e6f955465d405bc4535cc09386c6f43d00c0db6222a046464207ff15cf1f07b","ssdeep":"12288:HhEhEhEhEhEhyzWQMWQMWQMWQMWQMWEaKZaKZaKZaKZaKZaK/5gTo5To5To5To5M:HCCCCCM1M1M1M1M1MFLLLLLFaTo5To5G","tlshash":"b7a4b00b9362f3f4f257e9f2790133e8a94157b0d7e6ae90cea055e02d8a81c775e4e1","first_seen":"2026-08-17T01:30:49.841793Z","last_seen":"2026-08-17T01:30:49.841793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/layout--L1rOhfF.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.289Z","timestamp":1786930202289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/layout--L1rOhfF.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"50dc-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZTr2hyMMF103lxyVmnol2AVsT%2FDx56xZWjB9%2FixpvriX3Sg%2FizBWAElloQgiyrlqOCMIWOum4Gg7lWYZRDUkdp%2FW2K%2FGsHkziIhAkMmTcYZIsESryYh2830xulJzMB9hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9444a755685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20700,"size_decoded":7350,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (20529)","md5":"4e2bc34958dcc12431820768cf74cb54","sha1":"89d67560ca323c1e7d2023c67959a03cbe51d6da","sha256":"c5284519c8d1203abbf86e0a1985b8cfbfdf6f9dd5eae0456ec0a588c977c73c","sha512":"1f40e7c169ff3fcd8b4f8e330651d77cb9bbb657532e4050c99de9e9bed5a8104f6a1e5becf96019b2e651438d0f803e858929d0915a640256b4a7f60a2a2471","ssdeep":"384:lp0Hh5zRsRVTaUpoIRaeRCq3EAlDZ/o3csqKrSgNvpEM:P0Hh1RMVTaUpFRaeRCq3EAlt/o32KLv3","tlshash":"5b92e805a1046b9dfd3349cca89fd008705e5f58f63f49e2a33da03622648a7ba6b7d5","first_seen":"2026-08-17T01:30:49.844695Z","last_seen":"2026-08-17T01:30:49.844695Z","times_seen":1,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/home-DGg1VAZ0.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.342Z","timestamp":1786930202342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/home-DGg1VAZ0.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"192d5-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MzXQPT%2FfUD7gDzgrGgaJKfI3CmyiOPgMhQ6QLwThJQFjd2Q1VCJAcDira2SsCz%2BWkDlmqpQR2Y0WgVUCWQfeZwFeBWB46lyopu%2FVnoHECH3lXuI%2F43efg12gz%2BQ9ltGULQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9449aa15685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103125,"size_decoded":33843,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"16b8d2c1a8eecacb51334b2decf93561","sha1":"81a40bceaa5adcc926ab533b6269f6400f5e595e","sha256":"0ff3258173065acba3ade4a7577b9b3041d6947b99df74d48f465b90931995f5","sha512":"adccc31251bdb360227d65f93362e8d747ea4b10b7a7d325703d6f3993ed62dc19f5ca359d1a2fcbee5f3e246fb25a97c58525e12fa0704acf2943e40c483809","ssdeep":"1536:UNwgATPY/Pw6Sz2XdIKeP5gP+J5laTmmC14oSHu/FBl6vHxUGpkqViA6w5AwHdBF:UygAcw6SBgP+J5laTGt+H4WaVbG","tlshash":"a8a30889a124753a82f716da53a9c101b2b14944f449c8a8b0fc8c6f597e99803ffffd","first_seen":"2026-08-17T01:30:49.847124Z","last_seen":"2026-08-17T01:30:49.847124Z","times_seen":1,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/seo-M-DZZRA2.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.347Z","timestamp":1786930202347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/seo-M-DZZRA2.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"4b3-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRTuw9H10AR1r8oz9a5LY2Bmk51kMiJWTpIh6oXdjgyksMmIpxQ4CYAQyUgjeh49x37AYDfjfvnXTbgFdKerdJ25qaBa%2FuswbHFKchJb8nMyWWf6WPAz1z6Au4lMUvER0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e944aaa85685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1203,"size_decoded":1416,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1198)","md5":"8c7ae96a0723e15cea772a473dad88c6","sha1":"ef16687ca6dbae25af0d653d7b2dabf93f612196","sha256":"4e0fe14f008816f4a44825cf3823494d4a076a7a41045cd3dadcaba7ea82b2ae","sha512":"06099c22d94bbee29dacbcddf9e9d7852f42a6e6c241854c49e3e77208bd4a02482e7d1954d8829d55f60d1d69f4f5b209822139c65ff2ed9d9ce2c6861e338a","ssdeep":"","tlshash":"2f21df86a442a4a713fbd2505cef320ad3288e02e4a8cc023368191c16d6be7c4b5b2d","first_seen":"2026-04-08T10:30:19.818641Z","last_seen":"2026-08-17T01:30:49.849371Z","times_seen":2,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menus/pic.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.311Z","timestamp":1786930203311,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menus/pic.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 4543\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04OFc127:3 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:4 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:4 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13370-19228\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4520,"size_decoded":5616,"mime_type":"text/plain","magic":"data","md5":"8721a3343a99c25365dc9a46f6a44af4","sha1":"2b0ac2bc217530f9eac00296295286fe9da84831","sha256":"cddb5dea8f68c21d786817bc27caffcab3c795537ef1fe90df799e591d2f7587","sha512":"83751da0805126fe26109a1f2c82fe69436cd655cd3cefab9de6efe911a76fa1240cef1df715e935d98cf1f24ffb6f1c6cfd469f820c85bbd145e25cdfa00df6","ssdeep":"192:btuQX31QCSLLG6WaYcUzdxMOd/L93Cnsp53mvW2YjDmzH94ReAP:jXlvSLLacUMOd/L9DMVYOzH94oAP","tlshash":"9fe17e0b23408314e5552dfbc341bac450f69dfde247fa20da54c5822d9dca5eb8e7a7","first_seen":"2026-04-08T10:30:19.801133Z","last_seen":"2026-08-17T01:30:49.851615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/logo_footer.png.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.314Z","timestamp":1786930203314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/logo_footer.png.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 6482\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3ce33:12 (Cdn Cache Server V2.0), 1.1 ld82:11 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:8 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13799-45560\r\nAge: 5917583\r\nExpires: Wed, 09 Jun 2027 13:43:40 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6464,"size_decoded":7546,"mime_type":"text/plain","magic":"data","md5":"9e7fc20132dfde38ff56dc7cf8ab23e8","sha1":"832acd686e66e702cdd198778d3baec9e92aa345","sha256":"0c636cde3b8a9be76316ab200015eb69f2bfbafcc44815405be39447b0251be1","sha512":"c5f4547d15e155823d5ac9321ce8defb764e4b3873f23a71c6b75446553a89f046e623d0b65f2674a483b1b26bcb852698124c3df8c41ecd60ec0625c5a73b25","ssdeep":"192:WkyJUtYYaZUHI8LfmF9q/RvuIoc3lx+2OvP2/v7iQuHkf:YJUtYn+HbmF9qN3oc3S2OH2v7vuHM","tlshash":"c7129d0e4325e3b027b1f1b6270372f028916366f587c6d4d9a5c950bf97819726fae0","first_seen":"2026-04-08T10:30:19.756478Z","last_seen":"2026-08-17T01:30:49.854214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/entry.client-D7xZRhK6.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.281Z","timestamp":1786930202281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/entry.client-D7xZRhK6.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"2d8a1-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTf%2Bq%2Fhku74VAwXs0UrCh31QqFe2p37mzOkddGKuUeyzbYVfjVywfTE4mY4Iw2jIBr8GaasLb5JSL5CIv4xRDwY2wQZ4tLgdgncWdLcyPV2DMJU2%2Fn1zVnxYZxhgE%2Bwg0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9443a6c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":186529,"size_decoded":60333,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55106)","md5":"7c1b7033815d04f85dfaa28848d5a7cc","sha1":"91185dc2ab11f8e431e444814d6770bb99e4f07b","sha256":"d06c294e6f67593fece32dc94cfe5d5e690de2ca8dbec287e47f372e3a64daad","sha512":"8a91f457002ea3d7a23a23eb5888103cf57b7699faa7a37043612e278167ba2d23cd0bba3f07eff256bb5895182f25b192d148ff652f352ba00d0d9871affcc6","ssdeep":"3072:sQCYAMiv3GmOL87v/+OLSrfonc5F6LjThVSQPg:sdBLvGHLavhL2AiSg","tlshash":"a0040bec32be67166eb355a7109f1503727c3823680c4c71a211fe9967b844a51bbfee","first_seen":"2026-04-08T10:30:19.830415Z","last_seen":"2026-08-17T01:30:49.856377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/authHelpers-CUihrbnT.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.333Z","timestamp":1786930202333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/authHelpers-CUihrbnT.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"23f-19f4f8c7061\"\r\nvary: Accept-Encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziQYp%2FA8rsi4ZKX6UGssLavNvW7W4IgL7aACEjCNMRAgw1bF6CkhPWV%2BPOLDLj%2FSuwf9Wtr%2BDKnCXwpR6%2Fj00wbfkA%2FonCBj2gj8CV3SpRu1JfXrqZ3j9uvBZu2GVxxaFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2c4e9449a965685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":575,"size_decoded":1217,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (546)","md5":"0cfebce166f877232d5574eece132da4","sha1":"441f8e871f42f88615643993b6cd209b81bad242","sha256":"185930c676fdddca01904542ca029e88fe61ff8da15e3d24393a8193d069f9a5","sha512":"33f5fe71c20454e5fcf849614dc1433dd4beb613b9e10e2401696aeb1accf4e41b7ccbdb29a53b0ee6da7b90c2f60125244c4463c4e7febb83283ae321f5304e","ssdeep":"","tlshash":"83f022ceb1efe2a4b2c72829a8eb8019f13c8cd0842c5010a021904979320f0d266dea","first_seen":"2026-04-08T10:30:19.786123Z","last_seen":"2026-08-17T01:30:49.858274Z","times_seen":2,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/root-sEssBUdk.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.285Z","timestamp":1786930202285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/root-sEssBUdk.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"2ce9-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSOHwW0unutAQzQggvTitO2ElCGvKGXm9hqXYjb6No7ToyA5cKfWbFU3Rt80VMx0IiesocHWfi9cI7itzdYmXsVn5ixcA94YwKmPTHsez9nvkcNk56FlYCsEDVDNr8TMdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9444a715685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11497,"size_decoded":5225,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10090)","md5":"96720eff5886b490c1fe9fdcfef4c5ad","sha1":"971d57f535c0703113b87022157d4ca615ccb133","sha256":"be1a1426c993e444c7fbc4ee34c964e2bd591d500011b4833d899fa7bce38ec9","sha512":"13000a63de98914ac7b693280e46a5c9becef7915d6f0bf0de9fb08abeee98ca09f4f37b663af206ddc72c11013ec807404b65a626a2ac4786c80723e6678494","ssdeep":"192:99CzJMHVE7+gg6sKN8pvvjw0XCDi4GvWvyd8rfU/axFKSCffrOepJs44YUHWy:99AaE7+JKNMX7vWvg/Rff7pJs1P2y","tlshash":"8432d8d631c2e1366b514482ed3f4254f1221e16b425a01cb59c5ce7bf23dc7f66ab35","first_seen":"2026-08-17T01:30:49.860047Z","last_seen":"2026-08-17T01:30:49.860047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/VideoCard-CKKH0jOK.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.344Z","timestamp":1786930202344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/VideoCard-CKKH0jOK.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"770-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JByKh5qXIhbl6v47589b3Vks6wnNcbcs0A8QvyCXYtiPtIn891rPqzirZR8immdvJlTN0HAAZT3Ht0lLlVMX%2FxntNgxNK2jZq5%2Bx7amHYlHsQUxn08zIM87wUpk7JvR4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e944aaa45685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1904,"size_decoded":1834,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1869)","md5":"e9043bce05fe46846b6ea2e459f2288b","sha1":"9f8e5667d0ead48ecce371dd9f67bfcf1c6c0f8b","sha256":"eeed528aabd857556fb7ab49a15b3e193b1580e9f599ba4deb6a8899c87a126a","sha512":"f537d68da2ed54a64e9aa40407468f1036c8ad4127f787b3ab5dd2f76cb7583fc52bfdd175fde068e127bfa1e846dc0311921691a2f9dfbe71a79500cefea1fa","ssdeep":"","tlshash":"e341a8c4a112d3dea11f8bc49598c6482056c700fbbbc95aa3fca82d13988f4a71f748","first_seen":"2026-08-17T01:30:49.861453Z","last_seen":"2026-08-17T01:30:49.861453Z","times_seen":1,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/4.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.280Z","timestamp":1786930203280,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/4.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8161\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3ce33:10 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:8 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13799-45556\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8138,"size_decoded":9235,"mime_type":"text/plain","magic":"data","md5":"8e4eea925842a63c49bb891087eec51d","sha1":"c58f0f35cbd6ad4db0788c53cb54e955fca260ad","sha256":"8e619526758e6fb36f6c5fb4c5dcdbc5b2df021c31333b0c90c11b2d67272b4e","sha512":"e39f132355a1c175a301b76042f26eea764b7d0de73bca6a74e63c4f6b35de0b9423e3533d914cc7644c3ae3a14d0e11b24311c3c4a77cd2eed6338946928c11","ssdeep":"192:U5N65o+WQHXpFI17P2jMKeXXVoD0QYnP/VVXAa1EQug2Q5rZgCEzZfjhmJJAgO:U53KFaj2nenVoDZYP/VVwa1p5dE1flmC","tlshash":"8f42bf945a72f324c5d279b97d19688530504ebe13f3bf23d830e665280ad663b7e982","first_seen":"2026-04-08T10:30:19.76733Z","last_seen":"2026-08-17T01:30:49.768847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/apk-logo.png.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.314Z","timestamp":1786930203314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/apk-logo.png.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 14139\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01gZN143:3 (Cdn Cache Server V2.0), 1.1 PSygldLON4gd24:0 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:1 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13245-22508\r\nAge: 3519474\r\nExpires: Wed, 07 Jul 2027 07:52:09 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14116,"size_decoded":15213,"mime_type":"text/plain","magic":"data","md5":"7e8ed8e57bd356aa56912566075f1810","sha1":"7663ee632f09bc9b31c5f65073ddcd739cd3cfa5","sha256":"612be96649c3e09832e9f2ea7bc0243f4dc3a1a75662874834f74afb2a7db4a1","sha512":"ba0bd9c69b509b9663e1521dc11ceb0a954f4e4144fd97971d26bc08d3d4f842587c84a8f05cf121f0d0ce209afc45cec1a59e377f7e84db20bac4af3c60602f","ssdeep":"384:up41NvMix4IaGb/88eXlz9zL6I45RBhjPVDz5GHkTL7KAacM5h1Jp:uO1pw71BP8r5dYCKOY1D","tlshash":"e892cf550772b3e4e6a610f19c22804ad53aebdce6d3f8b6d8e09510299e51e33cecd7","first_seen":"2026-04-08T10:30:19.83948Z","last_seen":"2026-08-17T01:30:49.862703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1774168835572-499160519.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.565Z","timestamp":1786930203565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1774168835572-499160519.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 204595\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3me38:10 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA2hg92:0 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64503\r\nage: 3223570\r\nexpires: Sat, 10 Jul 2027 18:03:53 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208799,"size_decoded":205645,"mime_type":"text/plain","magic":"data","md5":"a1f970f44dab8685397dd6a0eb3df0fe","sha1":"e9a756de1ef781d0eb5878a00c5c0918b3be4195","sha256":"5b2a141aaa1f78c957416fa8b237b8ba745eedbb3f3656c6a26caf7cd718572c","sha512":"9a9ed9d7238a6e609b6a23326484631c54a4b0dab022c4e7f62899f6c97486b6716cdee39174b439c5fd6b482f4c102efec58bb15ceee29e0716f621dc7d7941","ssdeep":"6144:YWfAnZrWfkj6SE70jajP9nVPs9VoRJ+QNU0H36X98wHoKuj7HtHP0SoUoK:YSSZrWcjqIjaz9nNASJ+QNH368SoKujb","tlshash":"7964c01b5361e3f4a55becf5ba013ac4b10093f8c7da6950c915c6a13a8782cb6bfce5","first_seen":"2026-04-08T10:30:19.854496Z","last_seen":"2026-08-17T01:30:49.863892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":11,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1777271215393-849642706.gif.txt?size=340x340","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:14.117Z","timestamp":1786930214117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1777271215393-849642706.gif.txt?size=340x340 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:14 GMT\r\ncontent-type: text/plain\r\ncontent-length: 45161\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3mk54:2 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA2fd90:11 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a826426_PS-ARN-04w78186_15160-64644\r\nage: 3611737\r\nexpires: Tue, 06 Jul 2027 06:14:37 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45765,"size_decoded":46210,"mime_type":"text/plain","magic":"data","md5":"9bbf9d8ab1cb929ddb74592f0ebd61e0","sha1":"faf5f8b84cd4eb883756c0e142a70e84f04cce45","sha256":"90ff2eb060874122281b7c56a0b88e8f38ce559e7383441626614ab74dd91f1b","sha512":"e9194315678d6aea0c68d1333c4460972056bb1cc8d5ab62209892638a4f0bf25bc319ec447b56b633911fb431082964b5c8b7a608a1e1721dd434d56595a6bf","ssdeep":"1536:QSc7o3d3K3OpcxhoC5KVX14HkTRyb0grP0pSuSIDvM01SJ5M6:QSyoN3jcxhRcXhyggL0AiD04KM6","tlshash":"8163d0079212e3b0b2279cf4b40639c0a14197b4d7cafda0ce24d9b07a5b51eb6de9f5","first_seen":"2026-08-17T01:30:49.86508Z","last_seen":"2026-08-17T01:30:49.86508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1769167077169-74983415.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.621Z","timestamp":1786930203621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1769167077169-74983415.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 104789\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3hk52:4 (Cdn Cache Server V2.0), 1.1 ld83:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64513\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108531,"size_decoded":105826,"mime_type":"text/plain","magic":"data","md5":"bde99f35908d9104165225be6270f091","sha1":"f7304776cc5b30060d165a98fd898767c6309e6a","sha256":"7a77edabf634da9928c018f15330377b7806874d17abc4fcbf31e30ad2096cd0","sha512":"586512e8d696a92a90d0046df65de4142201720aae7758cd99fad99b06cd0721609c8481c9f80a97ab0af6b615994517f060093aa50ac6cdaa10bfd292a88a2c","ssdeep":"3072:LgweUD9uodzH0z3QTz39EtxFx6IHGPCGlDkR2WwNv12QUuOWawcMD6CP5H5tUAAd:LRH00Tz3KRUCx2l2QUjUcMD6CP15tUAc","tlshash":"89f3be0613a1f3f0a122ecf6b90135e4e50197b4e7da5e50c831c5a17a56c6dbbbf8e2","first_seen":"2026-04-08T10:30:19.841429Z","last_seen":"2026-08-17T01:30:49.868567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/favicon.ico","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.172Z","timestamp":1786930203172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"2905-19f4f8c6f2e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7c1etKyKvR8%2BVBRnFfr%2BuAD%2BxeUFDsDVH5qneeFPtOg7zZNjIeTYU1QHdUvYVYiqmVgZOTTVIRnv6kH4nIcxbEJ%2BNQow5M9JxoWx%2F1XDD8jjcPMzxKcmc8Mzvt5KueWew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e949cc655685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10501,"size_decoded":11391,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"eae2fd423508998fa93e2a9ba04ce335","sha1":"193e4ed0b7ab7280f01094ec90a2844c327e0ab1","sha256":"78d286ae565296997ee6315dd8a1161e110b14461aadbbcb0d87468eb303f017","sha512":"078969ce12968557deaf0192314ee287e0b189ffd63f613e3172a96129f10bf28af2cd124ec647c202d6bd23fcb9ec138e6daacc1595afbe3270ed62b00782fc","ssdeep":"192:67iyZnr73j6SALqA2HyLJ8Pr0V6j28q6fk3MkDe8w8K0QPaovx:67iGnvmSAWA87Ye28q6f/P8K01ovx","tlshash":"9022afecc6278d2429272bf7dde823592c30108f2b6d860ed4e4e56da8c6371d361796","first_seen":"2024-07-25T19:25:49Z","last_seen":"2026-08-17T01:30:49.869626Z","times_seen":175,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_box.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.291Z","timestamp":1786930203291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_box.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: openresty/1.31.1.1\r\ndate: Sun, 16 Aug 2026 22:27:56 GMT\r\ncontent-encoding: br\r\nlast-modified: Sun, 16 Aug 2026 16:25:26 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\netag: W/\"6a81e476-f8e2\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: wLW075QcbuN5sOuXkDXuW3S6w37DLk0qZ6bA4-rO4N-aIQIHvWviEg==\r\nage: 10927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":63714,"size_decoded":48792,"mime_type":"application/javascript","magic":"JSON text data","md5":"9aa03b8b8c1b05b7023cd1fcc0dff779","sha1":"061148b269945bc115bfcf22f88a7215cca34bc9","sha256":"b8010bb42520840e91fb89330b4b4ed07adf48eeaa969b8606618a0320991858","sha512":"c6d1a48a32566f97f26f2c80ff4616ff82ba378d59a2873f33212c0eedf6da1e392767b8726fa566cae104447e7eecbdd87db1dd21c189313a87f64920560141","ssdeep":"1536:XQhpTXsJOBKQxGVlbi8VodTIvlgew6RllIG7KvnGoY:gn7sJOBBsVcWodT+w6RfIiKve","tlshash":"e75302128fb537458159622cb07d331f8ef853a96c5db8b26e8175c7c40777788aa43e","first_seen":"2026-08-17T01:30:49.738645Z","last_seen":"2026-08-17T01:30:49.738645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":83,"connect":9,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1778060920568-641250353.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.600Z","timestamp":1786930203600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1778060920568-641250353.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 98126\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-01ba4130:0 (Cdn Cache Server V2.0), 1.1 PSygldLON4fk23:10 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64511\r\nage: 3611736\r\nexpires: Tue, 06 Jul 2027 06:14:27 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":103500,"size_decoded":99174,"mime_type":"text/plain","magic":"data","md5":"4c06085cda68eda9bfd5d00cfc236a68","sha1":"2e18546ae8ad44d952110c16b73acc26e4797fbe","sha256":"952370ae4b9900711cdae92711b81184e0bb4ce03f9990b9f163fe19f24341cd","sha512":"86b770d44cd96ebccd7addeceff7e9d04b182c172eaa1733374ff44bd9503fe2ffbb6757a7d98b3d868eb15ba83bf6deab438022446440650d8927b65e4929bb","ssdeep":"3072:QYr1TK/LGtb9DJZkTjQJKuNGRWvlje8fsV3ye441KaLWy+xRRgbcW7K/w25ueX5c:QYrkLGrJZc+f0RWg73M8VLyTRgbcB/wH","tlshash":"8bf3cf1b83a1f3f8f15becf9ba0236c4a50193b4dbd9aa10c861c6916a53c1c767ecd5","first_seen":"2026-08-17T01:30:49.871078Z","last_seen":"2026-08-17T01:30:49.871078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_banner.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.742Z","timestamp":1786930203742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_banner.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: openresty/1.31.1.1\r\ndate: Sun, 16 Aug 2026 22:27:57 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 11 Aug 2026 07:55:52 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\netag: W/\"6a7ad588-655\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: YvqPdUEzYAnz50sm5DhgsBBpdY-9P8bN8s31UuKQnc4uAnQopOu54w==\r\nage: 10926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1621,"size_decoded":1848,"mime_type":"application/javascript","magic":"JSON text data","md5":"661c72965d7bd51fc222f9c44a557171","sha1":"95468ea74babd6c2ae6bbb29ceda538342954784","sha256":"b9f8335e3984f260c6f5b0770665670672b3eb98a91be286ffe3d650fcce9a38","sha512":"e8e29fb9450568a51d91c368621b6bc728df1b3077e2c864a327b89139e4611f93f4252636f1fa57d209ceba9336edfa47a268e59e502ae1d74ddac8ec81e3e1","ssdeep":"","tlshash":"d131c8c81429ab73ba6f61165a4c76cc34323236cd06577c1bb176b43c3ddc96990e88","first_seen":"2026-08-17T01:30:49.87219Z","last_seen":"2026-08-17T01:30:49.87219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dxj4su.e36cxt7p.com/public/1/plugins/materials/n_banner.js","fqdn":"dxj4su.e36cxt7p.com","domain":"e36cxt7p.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.744Z","timestamp":1786930203744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e4qnk4.e36cxt7p.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:AB:B6:14:2E:81:AA:4C:30:3B:F8:E6:46:8E:82:C7:CB:CB:FA:6E","sha256":"12:31:83:98:36:89:64:AE:41:DF:72:9E:C4:D3:E3:86:12:1B:B3:B2:56:7F:06:02:24:E9:B0:FE:CB:27:F7:89"}}},"request":{"raw":"GET /public/1/plugins/materials/n_banner.js HTTP/1.1\r\nHost: dxj4su.e36cxt7p.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: openresty/1.31.1.1\r\ndate: Sun, 16 Aug 2026 22:27:57 GMT\r\ncontent-encoding: br\r\nlast-modified: Tue, 11 Aug 2026 07:55:52 GMT\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\netag: W/\"6a7ad588-655\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 75dd52ee26c5e5edbd575fc892e79bb6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: oWtqmTAOWv8NjqXkyfEb1fO5k85Bzn411RQ1LVFxIMDtgpiTsxQf8w==\r\nage: 10926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1621,"size_decoded":1848,"mime_type":"application/javascript","magic":"JSON text data","md5":"661c72965d7bd51fc222f9c44a557171","sha1":"95468ea74babd6c2ae6bbb29ceda538342954784","sha256":"b9f8335e3984f260c6f5b0770665670672b3eb98a91be286ffe3d650fcce9a38","sha512":"e8e29fb9450568a51d91c368621b6bc728df1b3077e2c864a327b89139e4611f93f4252636f1fa57d209ceba9336edfa47a268e59e502ae1d74ddac8ec81e3e1","ssdeep":"","tlshash":"d131c8c81429ab73ba6f61165a4c76cc34323236cd06577c1bb176b43c3ddc96990e88","first_seen":"2026-08-17T01:30:49.87219Z","last_seen":"2026-08-17T01:30:49.87219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/index-BdhrSI3S.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.284Z","timestamp":1786930202284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/index-BdhrSI3S.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"e4d-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bERaTepSUDsv3qWAHsB9hQP3UCVN5MsdoUo%2BTmsjvirNQM9LBv%2BYH84X1y5ffz98eSUCpMmdm%2BnrxFTmMOXSjhBmxZ5OIlsFcZG3O3f2pRQAmz%2BjvKR7bkHt4ELCkBzblA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9443a705685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3661,"size_decoded":2286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3660)","md5":"465f06281594d53da0090574f8573260","sha1":"56965699cd236ee95341b8a0abfec913a51fe815","sha256":"353bfe461bd2aa01f8850ef37a943a9daac8997cb03d453b1055bd1723d851c9","sha512":"6a5b201993f28246902e77dac5730a7d52bbed6a269a447676e921a99512b6a3cb27a33e446005adcc3d2fcc7d92cc956ebd924ca0e623429d2edba6bad037e2","ssdeep":"","tlshash":"c971348db7c4f08249c6a960037ba31772b9377328bec2a193ee99b111775198237f74","first_seen":"2026-04-08T10:30:19.808961Z","last_seen":"2026-08-17T01:30:49.87315Z","times_seen":2,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/8.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.289Z","timestamp":1786930203289,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/8.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 7813\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3bl31:9 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:8 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13799-45557\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7790,"size_decoded":8885,"mime_type":"text/plain","magic":"data","md5":"858036d512fb88ebbf81a473efaadeb2","sha1":"36e2b458f8eeea5216d329e8f0c9ae6fd7642feb","sha256":"85dc3b2a66a35613ceb2874b36823b6813f1c7027ef9fa9c0c7d4488c9413b67","sha512":"fc7885ee189247786d2245124b4eb1da7b286d603ec99337642d5e0b2b85a3b08197bab69e7b7e77726f8805c9a056f8f1247bd313938b9a83e11b5810afec45","ssdeep":"192:/uXAg+UGsQzyqL1YbxugZcoqSVfABgn7mDEEHGznMe10zmz+dEi3:/1LUGkQ1YFvZcoqSVSVA0GzL10ziIEq","tlshash":"f832b0ccd909f3215f06e8dd3591dedd160a9f8886b9e76ccf30410298e6528ab4e4cb","first_seen":"2026-04-08T10:30:19.764917Z","last_seen":"2026-08-17T01:30:49.755029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/1.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.293Z","timestamp":1786930203293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/1.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8041\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2vr114:8 (Cdn Cache Server V2.0), 1.1 ld84:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:11 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14227-17447\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8018,"size_decoded":9106,"mime_type":"text/plain","magic":"data","md5":"b65d1a5f6dcc604ea23d2fe284ee0954","sha1":"742764ab884916678c055baa58891a99c2c0689f","sha256":"f76cc08e4921276e08b24bff97eb8ac418dd8c8dfa4321df7a5db2b4c1d5ec57","sha512":"fa794f653342876d9217e152c192600c148dd9c5c1931c6c540ca1ad36e8b5d717a1d1220e85081656077e9d9e2d8c1724424cf01bc304dbb2814faa4f745a65","ssdeep":"192:kk8mu8JXtl0BhZJyVCXFtp3ndkpMLhvYoJn9gJvk54wdsd/BQQZJQ/ulnrG2V7Ui:T8MJdeZQVCPpt+ip3PcvEdsd+wWuJhIi","tlshash":"7a42af4dc608b3f080aff175dda315d891053998f2d2ed20e07edab1944b425b7ed866","first_seen":"2026-04-08T10:30:19.78908Z","last_seen":"2026-08-17T01:30:49.87411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/7.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.306Z","timestamp":1786930203306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/7.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8607\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3bv47:0 (Cdn Cache Server V2.0), 1.1 ld84:2 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:8 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13799-45559\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8584,"size_decoded":9669,"mime_type":"text/plain","magic":"data","md5":"6885e7696f5ae36ed621947039b25723","sha1":"f20281b4ca1e9fa7872e5241a85b3c3f98a7d6f8","sha256":"3291973ab7672cdb33d21222f65c21e775e8460d2a1c47ff59010c20dae2120d","sha512":"22d16a8f66c1f97e01eeae53183cc7bddd7d6247f2e00c004c87d5408fed9303d4cf305551904dd7d8e48a5209ebd55f2ed323b5b8e91567cf8ba9d958451e32","ssdeep":"384:Y/14sPTOyq4izByuvMl4C7507AX7QtM4NMW:Y/VTOyq7zMUBC7Zyhx","tlshash":"9542c0c68095f3c4f04bfab49997b999f30c1a9adec60ec0fd4995c31aa6604e5ded40","first_seen":"2026-04-08T10:30:19.745306Z","last_seen":"2026-08-17T01:30:49.734398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menus/luntan.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.312Z","timestamp":1786930203312,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menus/luntan.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 4873\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2mg31:10 (Cdn Cache Server V2.0), 1.1 ld84:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:14 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_14871-40638\r\nAge: 5917583\r\nExpires: Wed, 09 Jun 2027 13:43:40 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4850,"size_decoded":5938,"mime_type":"text/plain","magic":"data","md5":"a8be54da35d07561d6ee71c605ccdbcb","sha1":"640cbdd4c9ffd3f0a53c8953a776daa5696541bb","sha256":"8fd0e25829a73bc2805d84a12f12a7294d1e927e88ea2df9dae0f7c6f8a8e820","sha512":"e14fc1881ba01e4edaba301927dcf4bca5a5b5b095c52d572a7c2654cffc7a43357009f8c3eb9c5e900a1920cf4ea39ac4070b0e4d912290402350f98b3cad77","ssdeep":"96:y4ilj80VK7f2zD1mx7o8bdV5QsLaNmvZ4eY3ePSTywQKSZm1pktS/yq8sxah4Jpk:yt58UsuzDa7ZbGXu1ke6B2m1KU/pVpk","tlshash":"32e18e6ea6f0d3b1b937a1d2030427d5c4b0f65cba8f4584dd449ad23587699fbacec0","first_seen":"2026-04-08T10:30:19.867163Z","last_seen":"2026-08-17T01:30:49.875141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/__manifest?paths=%2F%2C%2F2257%2C%2Fauth%2Flogin%2C%2Fcategory%2Fremen2%2Ffcsn%2C%2Fcategory%2Fremen2%2Fhsyz%2C%2Fcategory%2Fremen2%2Fhwlc%2C%2Fcategory%2Fremen2%2Flbdx%2C%2Fcategory%2Fremen2%2Fnqzm%2C%2Fcategory%2Fremen2%2Fsfsn%2C%2Fcategory%2Fremen2%2Fsytj%2C%2Fcategory%2Fremen2%2Fzbyw%2C%2Fdmca%2C%2Feudsa%2C%2Fhome%2Froute%2C%2Fpost-detail%2F1010691%2C%2Fpost-detail%2F1031298%2C%2Fpost-detail%2F1043429%2C%2Fpost-detail%2F1069133%2C%2Fpost-detail%2F1091269%2C%2Fpost-detail%2F1115058%2C%2Fpost-detail%2F1142733%2C%2Fpost-detail%2F1169309%2C%2Fpost-detail%2F1174518%2C%2Fpost-detail%2F1176976%2C%2Fpost-detail%2F1180857%2C%2Fpost-detail%2F1196392%2C%2Fpost-detail%2F1202855%2C%2Fpost-detail%2F1212394%2C%2Fpost-detail%2F1214766%2C%2Fpost-detail%2F1218012%2C%2Fpost-detail%2F1223874%2C%2Fpost-detail%2F1231825%2C%2Fpost-detail%2F1231907%2C%2Fpost-detail%2F1233193%2C%2Fpost-detail%2F1233275%2C%2Fpost-detail%2F1233634%2C%2Fpost-detail%2F1233918%2C%2Fpost-detail%2F1233931%2C%2Fpost-detail%2F1233977%2C%2Fpost-detail%2F397084%2C%2Fpost-detail%2F398352%2C%2Fpost-detail%2F420942%2C%2Fpost-detail%2F495410%2C%2Fpost-detail%2F504644%2C%2Fpost-detail%2F727502%2C%2Fpost-detail%2F886131%2C%2Fpost-detail%2F919710%2C%2Fpost-detail%2F921961%2C%2Fpost-detail%2F931888%2C%2Fpost-detail%2F968351%2C%2Fprivacy%2C%2Fterms\u0026version=4758ce7c","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.768Z","timestamp":1786930203768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /__manifest?paths=%2F%2C%2F2257%2C%2Fauth%2Flogin%2C%2Fcategory%2Fremen2%2Ffcsn%2C%2Fcategory%2Fremen2%2Fhsyz%2C%2Fcategory%2Fremen2%2Fhwlc%2C%2Fcategory%2Fremen2%2Flbdx%2C%2Fcategory%2Fremen2%2Fnqzm%2C%2Fcategory%2Fremen2%2Fsfsn%2C%2Fcategory%2Fremen2%2Fsytj%2C%2Fcategory%2Fremen2%2Fzbyw%2C%2Fdmca%2C%2Feudsa%2C%2Fhome%2Froute%2C%2Fpost-detail%2F1010691%2C%2Fpost-detail%2F1031298%2C%2Fpost-detail%2F1043429%2C%2Fpost-detail%2F1069133%2C%2Fpost-detail%2F1091269%2C%2Fpost-detail%2F1115058%2C%2Fpost-detail%2F1142733%2C%2Fpost-detail%2F1169309%2C%2Fpost-detail%2F1174518%2C%2Fpost-detail%2F1176976%2C%2Fpost-detail%2F1180857%2C%2Fpost-detail%2F1196392%2C%2Fpost-detail%2F1202855%2C%2Fpost-detail%2F1212394%2C%2Fpost-detail%2F1214766%2C%2Fpost-detail%2F1218012%2C%2Fpost-detail%2F1223874%2C%2Fpost-detail%2F1231825%2C%2Fpost-detail%2F1231907%2C%2Fpost-detail%2F1233193%2C%2Fpost-detail%2F1233275%2C%2Fpost-detail%2F1233634%2C%2Fpost-detail%2F1233918%2C%2Fpost-detail%2F1233931%2C%2Fpost-detail%2F1233977%2C%2Fpost-detail%2F397084%2C%2Fpost-detail%2F398352%2C%2Fpost-detail%2F420942%2C%2Fpost-detail%2F495410%2C%2Fpost-detail%2F504644%2C%2Fpost-detail%2F727502%2C%2Fpost-detail%2F886131%2C%2Fpost-detail%2F919710%2C%2Fpost-detail%2F921961%2C%2Fpost-detail%2F931888%2C%2Fpost-detail%2F968351%2C%2Fprivacy%2C%2Fterms\u0026version=4758ce7c HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yXJs9QA5AFRo25oGMncjd4TSpv97LN3jNB67tmK9Od%2FvVX0WoyMmH5UbwMd4n6LQQAoZNH%2BZ3zg%2BC4kEdveiU6OxMMAwd0qWU5AOICoLhgtgzkhnClYY4TCZQIaNq%2BNKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e94d8d7b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6893,"size_decoded":1915,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c7f6bc4d0bdb5e8f45d8513be43492a9","sha1":"58a52e54fe4539817513b32ae4ecb48dc7118b56","sha256":"97d1ed01d34c0de7c323d8d7e08162adb3501c8aa4e8729f49253344d399c879","sha512":"d328c5677cf7002a48fcb1e1337f70da110f48a4991b8180926d5dbd7a2cfa8186cdc2779e745fcb5028453a0553810f052926f9e570bf54f8af4f12a11605bb","ssdeep":"192:qlbGsbIjECqS/jlq+2orzcDH6vDYLIuDL2+fb4hC:qc0IjZxZsGQ76bYcuy+fUQ","tlshash":"bee13b59af113d2d80bc7f85fd2065910ae0b3411f29f8bd9d3ad24d79d2ce20669c3a","first_seen":"2026-08-17T01:30:49.771656Z","last_seen":"2026-08-17T01:30:49.771656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baba.jchc47.cc/assets/Footer-Dy6eNeag.js","fqdn":"baba.jchc47.cc","domain":"jchc47.cc","tld":"cc"},"ip":{"addr":"194.53.53.254","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:02.328Z","timestamp":1786930202328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jchc47.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 03:10:38 GMT","end":"Thu, 15 Oct 2026 04:09:03 GMT"},"fingerprint":{"sha1":"DB:D4:7E:D7:5E:69:88:82:92:18:05:49:55:59:F5:61:7F:24:CA:8F","sha256":"C5:83:C3:BD:10:0E:68:75:0C:49:7C:3B:B4:06:A6:F9:32:23:56:B1:4B:8A:6C:C5:0F:42:38:46:09:27:D2:4C"}}},"request":{"raw":"GET /assets/Footer-Dy6eNeag.js HTTP/1.1\r\nHost: baba.jchc47.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\nx-powered-by: Express\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000, immutable\r\nlast-modified: Sat, 11 Jul 2026 05:00:31 GMT\r\netag: W/\"1496-19f4f8c7061\"\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eo2Gx1cAjiGyTt4JiCWuZwOnkSgF85Dibu4kOQdxc3WUhVItRsk56WV%2FlE4aEQkgMkODRc0wVwFh5BnmOWgAstzh62IZ6VQjGOKda9X4lSFtIB2SW%2FUmghbTr8ziPOovLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2c4e9448a925685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5270,"size_decoded":2642,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4818)","md5":"bcd10104d0125ea2aea46eb8080d60c4","sha1":"69dc9d13e62ab281defa3df7e4f92fc869f970a5","sha256":"f0fd5d16f524c53ab19df9b19d87d53f7ac855104b3810521700331887476aec","sha512":"9bd49f0d1b5686d1493e23e97553d85dbc6de65c523cabd1108146962108e55b03ef248eb2b47c0ded75412e20b80219f6f5af683c4971c04bf9bc73732d2f73","ssdeep":"96:14WEnlwLDRTRakVszxyl0LkY5uKW55JJovYey1QWgvn:14WEnlM/DIIl0LkVKWpivYey1QWqn","tlshash":"04b1e018914a6fed9e1704d8ac5ee00a714b5f84c67fc895607d301326d598aff93bc0","first_seen":"2026-08-17T01:30:49.87656Z","last_seen":"2026-08-17T01:30:49.87656Z","times_seen":1,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/logo-1.png.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.269Z","timestamp":1786930203269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/logo-1.png.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 4916\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3me38:12 (Cdn Cache Server V2.0), 1.1 PSygldLON4mu28:8 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:1 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13245-22505\r\nAge: 5917583\r\nExpires: Wed, 09 Jun 2027 13:43:40 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4914,"size_decoded":5989,"mime_type":"text/plain","magic":"data","md5":"f2ef4aef519de4f34b6fc95ca8cf272e","sha1":"427db101358e29b574994d3d4b9e78f6fbb8cbde","sha256":"8ed24623465eda826ace9d060302a7c2095784ec05c722d9f5f2f3b7247fa9ad","sha512":"bb38f536b1383d793249ce17960649899939a556c165842e79d7159d7d9b42fde38ec66795af6bc3df9659ac20a0ea7bca353affb8ac0ff103631d3d28fab033","ssdeep":"192:08i6SQORT9IxwKIjqY0pN4JuuCdPhhenEgD:KbQORT9rKIjqYimJ9CdPqEgD","tlshash":"a4e18e0f1392dfad7f69fb8b464178808d122563ebc77868c4c29aa027dacca135f5d1","first_seen":"2026-04-08T10:30:19.79828Z","last_seen":"2026-08-17T01:30:49.778478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/1.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.272Z","timestamp":1786930203272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/1.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 8041\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdbOSA2vr114:8 (Cdn Cache Server V2.0), 1.1 ld84:12 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:4 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13370-19225\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8018,"size_decoded":9105,"mime_type":"text/plain","magic":"data","md5":"b65d1a5f6dcc604ea23d2fe284ee0954","sha1":"742764ab884916678c055baa58891a99c2c0689f","sha256":"f76cc08e4921276e08b24bff97eb8ac418dd8c8dfa4321df7a5db2b4c1d5ec57","sha512":"fa794f653342876d9217e152c192600c148dd9c5c1931c6c540ca1ad36e8b5d717a1d1220e85081656077e9d9e2d8c1724424cf01bc304dbb2814faa4f745a65","ssdeep":"192:kk8mu8JXtl0BhZJyVCXFtp3ndkpMLhvYoJn9gJvk54wdsd/BQQZJQ/ulnrG2V7Ui:T8MJdeZQVCPpt+ip3PcvEdsd+wWuJhIi","tlshash":"7a42af4dc608b3f080aff175dda315d891053998f2d2ed20e07edab1944b425b7ed866","first_seen":"2026-04-08T10:30:19.78908Z","last_seen":"2026-08-17T01:30:49.87411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":3,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/ssrsite1/menu-1/2.webp.txt","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.277Z","timestamp":1786930203277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /ssrsite1/menu-1/2.webp.txt HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 17 Aug 2026 01:30:03 GMT\r\nContent-Type: text/plain\r\nContent-Length: 9461\r\nConnection: keep-alive\r\nServer: openresty\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=63072000, immutable\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Methods: GET,POST,PUT,PATCH,OPTIONS\r\nAccess-Control-Allow-Headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nx-via: 1.1 PS-HND-04Dlo138:6 (Cdn Cache Server V2.0), 1.1 ld83:13 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:2 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_13311-41054\r\nAge: 5917582\r\nExpires: Wed, 09 Jun 2027 13:43:41 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9438,"size_decoded":10525,"mime_type":"text/plain","magic":"data","md5":"e91201e2d3e42ea36e8a4ad7b9dc9fcf","sha1":"d2e01c21d1ba82e26d2c583a919960a8d18060be","sha256":"9266801231ad03115d098ea3ea955dc16731b6cce06926dab97933a2be64b84e","sha512":"945790d77a2ef812c74c2e8ebdb2aab14eafdcf5fafb1e796a21a1056f4c9a3132feb03441da9ed736b83fe0efb5bfd24b69d19a6cd130b3b6b580e4062feaf3","ssdeep":"192:0TYEULUKunwapyxnEV1raOULzQRw27L7tXZcjUR0geeeqLg5Zn6XmSiDJTBvnaZS:00VQ5Ta7GLOKeq0PnyMVuBc","tlshash":"3e52af479360ffa8425b0dfe5a9842e4712ad5faa21e5c10c922dc706f6b6de33cc890","first_seen":"2026-04-08T10:30:19.781124Z","last_seen":"2026-08-17T01:30:49.791469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":9,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mxjsnalx.erbaiwulaoge.com/uploads/images/1778060842705-435203573.gif.txt?size=999x30","fqdn":"mxjsnalx.erbaiwulaoge.com","domain":"erbaiwulaoge.com","tld":"com"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://baba.jchc47.cc/","date":"2026-08-17T01:30:03.599Z","timestamp":1786930203599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mxjsnalx.erbaiwulaoge.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 06:32:14 GMT","end":"Thu, 29 Oct 2026 06:32:13 GMT"},"fingerprint":{"sha1":"0B:8D:B6:BC:57:D6:FC:16:B8:CD:88:9B:EB:19:8A:EB:74:26:4F:92","sha256":"5F:D9:27:9D:02:EE:BC:CA:75:C8:12:52:CD:50:07:29:59:AC:BA:77:7D:A6:A4:DC:D2:43:EE:04:42:B9:52:AC"}}},"request":{"raw":"GET /uploads/images/1778060842705-435203573.gif.txt?size=999x30 HTTP/1.1\r\nHost: mxjsnalx.erbaiwulaoge.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baba.jchc47.cc/\r\nOrigin: https://baba.jchc47.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 17 Aug 2026 01:30:03 GMT\r\ncontent-type: text/plain\r\ncontent-length: 183825\r\nserver: openresty\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=63072000, immutable\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,PATCH,OPTIONS\r\naccess-control-allow-headers: client-channel,client-lang,client-type,client-version,Authorization,lang,platform,img,x-info,version,X-Aws-Waf-Token,Referer,User-Agent,Origin,Content-Type,X-Requested-With,Accept,time,userid,hash,JavApi-Version,pwa-ckv,usertype\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nx-via: 1.1 PSrbdjTYO3bv47:11 (Cdn Cache Server V2.0), 1.1 ld84:0 (Cdn Cache Server V2.0), 1.1 PS-ARN-04w78186:15 (Cdn Cache Server V2.0)\r\nx-ws-request-id: 6a82641b_PS-ARN-04w78186_15160-64510\r\nage: 3223568\r\nexpires: Sat, 10 Jul 2027 18:03:55 GMT\r\nalt-svc: quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3-Q050=\":443\";ma=2592000,h3=\":443\";ma=2592000,h3-29=\":443\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189584,"size_decoded":184863,"mime_type":"text/plain","magic":"data","md5":"0e40b40185a51b7777e6da0e40e346f2","sha1":"e9ec992efdbd663e89b51a341964c228d1a2d1ab","sha256":"f3b14677fb8e8a57e66eee9e5f3994ae3ccae982fe9ca7106da4786c120a1dfa","sha512":"0c7ce9807dedaabd3275682cb190d36679889b8811c0320b621e88183a2e07bd35a9d7403950e0d7bd504bd228a9d288c94f5c9d5e7f56e94e96075332a2b7c4","ssdeep":"6144:y+qxehALWOXox1U4+DyokXhCs1redSEoKkxrpR9L4e7:5qxuUWHT/AyokXhCs1rewEoRxP7","tlshash":"b254bf2a53a1e7e0a127ecf9690236d4f600c378d7da7a50cd2085913993d2db7afde1","first_seen":"2026-08-17T01:30:49.877857Z","last_seen":"2026-08-17T01:30:49.877857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}