{"report_id":"3f730be3-2d95-44e7-a05d-56627d4b7097","version":0,"status":"done","tags":[],"date":"2026-10-09T17:08:44Z","url":{"schema":"http","addr":"ellevesta.top/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"104.21.86.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"title":"Ellevesta","dom":{"size":161858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49518)","md5":"c131b46d0c5efaee6228de8be351d2c3","sha1":"2aad3a384a8be01ab6142a08ab796cb7d3eace91","sha256":"4edbac74be0ffa87e7a42ac17e0fd9f546f985e906f38aaa988f0c2ccd843924","sha512":"91eb58cfc5e0aa6cf7c8f27889fe31fad01202f6452f20746f6079d5b2328e2d1180415f4cb025886f549c26d74b74f943d5078a1c9aba15b37383bef5383624","ssdeep":"3072:L/JpSpwn5pjQOBwIx4VOFmR04VOFmRfmwnkekekekek2:7JpSpwn/j4i4tmIkekekekek2","tlshash":"b0f34bbc610207bb25b751d9f661fa5aeda6ff0fc2069e0976ecb0425fcac309956070","dom_hash":"domhash74526765dc97b18461ac43e54db7e337","first_seen":"2026-10-09T17:08:51.951451Z","last_seen":"2026-10-09T17:08:51.951451Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ellevesta.top/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"104.21.86.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:08:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ellevesta.top","ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-10-09T16:23:42.5948Z","last_seen":"2026-10-09T16:23:42.5948Z","alert_count":0,"request_count":27,"received_data":7076719,"sent_data":13728,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webapi.elleves138ta.com","ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-02-28T17:18:58.266682Z","last_seen":"2026-10-09T16:08:16.430409Z","alert_count":0,"request_count":7,"received_data":62178,"sent_data":3942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"vip-cservice.com","ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-15T20:16:59.760558Z","last_seen":"2026-10-09T15:52:09.234837Z","alert_count":0,"request_count":3,"received_data":67512,"sent_data":1489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-02-12T08:38:00.929095Z","last_seen":"2026-10-09T15:52:09.259257Z","alert_count":0,"request_count":9,"received_data":823044,"sent_data":5389,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d2fae169b0836a7d2ccb486577b0cd","sha1":"f07925168f1059572c55af4537da849e346020c8","sha256":"23c290f84eb88837dd3ce8c179f71da766e8a0d192c3b1f478f4e5a6929d792a","sha512":"86722b8208bc5d003f4e11c82bc76539e65d988c478b1e58b79388a08f497d1713bf96e715ab22cd44d6db5849c15879da2f673a920839129f8e3a2deef9acdf","ssdeep":"","tlshash":"fcc08cc4a0e26d001a96641220ef38e49024442678485b46dc94d9983e220f08233ea8","size":148,"data":"","first_seen":"2025-12-18T00:45:38.455228Z","last_seen":"2026-10-09T17:11:00.688591Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35bd91ba9eadd9c1d6715805a33a3521","sha1":"2c6150de70e399e0ce5023075c4936c70bbab66c","sha256":"53e3deb4aaa8f3ec248b25d8e37406c521926b5df185bf31fbfa9be4fc914730","sha512":"28dd1200d9875043c1e990b49da139e1dfa4887b646943888ca4c54910ef66e59f71255973d6245f7aff3d5775944f07e66fe3a51d37a2d6a4465437ad889f19","ssdeep":"","tlshash":"2ce02689908834111b421200a2efa8f2e025443ee75c0b529ca594a81e242726377d98","size":306,"data":"","first_seen":"2025-12-18T00:45:38.434121Z","last_seen":"2026-10-09T17:11:00.668533Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4622509a150e053c1344b22744b58831","sha1":"a8a7b9e8d00b9cc82f016f0d136a4437f0f790d1","sha256":"b00706366d4d1f1e32235cbbdb1e78be0915dafb6113693290c6dcd87a01e32d","sha512":"a9e188eed78a011936d3e1f0cf064c3da6402a76093aea7f6655832d13bd073e92deba7a65ff234a49b03b0abdb78a25c02147eaa642ade645ded8e2dd574229","ssdeep":"","tlshash":"efd0a7daa0d2691815535011607f3dd450289422794c17a59db9c89c2a721f0d177fdb","size":231,"data":"","first_seen":"2025-12-18T00:45:38.43516Z","last_seen":"2026-10-09T17:11:00.669708Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7b3de7354307d425e2c87cd30f4ede6","sha1":"dc66414ea415cd874318119239b4af134ba2567b","sha256":"6ce792f41f1371f6d74e42988b05237acaaaf3eabaf18d6f6c7b56b2e58c4823","sha512":"15313ff7e64d913b8e7a1bc9f0802d26ec31225c1e0be7fa325315bc6cebe8d5e070cba2c58e83993c461951180bb947eed81bd1bbd165015772906c7b2599c9","ssdeep":"","tlshash":"73c08cc4a0e23d001602641010af24e8a0244026704c1b028c94d8882e220f08233ed8","size":136,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-10-09T17:11:00.692004Z","times_seen":1062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cd0f0767c8e84e2cfefcbb6357248d1e","sha1":"c3e0a6eb03d21a394eab70aee55366a3178d78aa","sha256":"c0f44df086902103698b27947a539ce2977460487a59aa2aafa2f0bd5667cb00","sha512":"e78dfd4a137b24c2987358b3ce244e9ddf18bb0d3b0e9d1e8bfdb41551f05d6ed96d67626d9cf1d7980479b96a18e4473a9e26f5bcbdf46ba1cad7006a1b323f","ssdeep":"","tlshash":"13c08cc5a0c22d205606665010af3ae4a028402ab0481b028cd4e8483e220f08237e9c","size":149,"data":"","first_seen":"2025-12-18T00:45:38.46866Z","last_seen":"2026-10-09T17:11:00.683951Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"80adf127d675f8056e20db451748a2aa","sha1":"b190990b1148c68adf01f039fbb9afcaba84c6b8","sha256":"7f280c2b4c4402736eef5e78a03a4e60987ff9a3f5ebcaeaa7f06e6b3549606f","sha512":"3b199f2b32b5c4fc6280237a345e44147bddd64d935dbfb4cdd6e69ecb81e94436548eec6d0e5ee8d6fab83194be3096b2e66fdcba685420549c1644992a40db","ssdeep":"","tlshash":"54c08ce4a0d62e106616691018af24e4a024402771481b428d99ec482e220b08233fa8","size":148,"data":"","first_seen":"2024-04-05T15:11:03Z","last_seen":"2026-10-09T17:11:00.68605Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"44f88d3c80bc09fbd14220a62070b132","sha1":"1c38a981d97a9e216b99105f6471778d52b7c906","sha256":"061d8a59280c9eecabe48f52b4d84827bc9bee91f9f71eedcc42da5e154f1aad","sha512":"10ef249d374fe212f3e40bc809d7cba6903d70b1133ef257295a6399e9c69b753418719d889af48d0c2ecc8e475bf582a9003b09e5834e336d870d1b689681be","ssdeep":"","tlshash":"dfc08cc4a0c36e201b02691011af25e8a0248426b04c5b43cdd4d8482e234b48233ee8","size":146,"data":"","first_seen":"2025-03-17T15:48:28.332542Z","last_seen":"2026-10-09T17:11:00.667875Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"740c0bbdd3eea0ddf49799cc054669de","sha1":"14da5c0a2be4d92a41f7e047f0d96bbe250a61fe","sha256":"498cf069fbdb51dfd7b126dda9b48baa1766b13129360e781f1aad064f63f640","sha512":"267cf7a4506385ccb09aec29f352e1f3edc03e517bcf7297bdfb31b7d685d5736d7866e853aaf792c9c604981c754df6177aa7ab432d67e6551fcdc5749761c3","ssdeep":"","tlshash":"87c08cc4a0c37d001a02681050af28e49028442670481b028cd4d8482e620b48233e98","size":139,"data":"","first_seen":"2025-05-29T09:52:53.500165Z","last_seen":"2026-10-09T17:11:00.657947Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e76698900cc074c118273ee128d84c1a","sha1":"7b3590bcfc29dc2519904ccc4ac8c97116824196","sha256":"35cb0d66de3213ee52d20af1896e1ac687c955ee94f808bb46617ccf672a0a48","sha512":"45c928a6dc08ce34e9886e957a461d113485f49e1c0438ef2e15405b9e79be3218d1abedcf0e67d4678c67521f0483b7fdfc56a5ca07270bd961b4c0e95d351d","ssdeep":"","tlshash":"91c08cd5a0da6d011626681454bf35f890244027704c1b12ec94d84d2e230f0a237ee8","size":149,"data":"","first_seen":"2025-12-18T00:45:38.431849Z","last_seen":"2026-10-09T17:11:00.682641Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b58bc5d09e78ee97ce127d3743acf7cd","sha1":"a5321050c1717de2c7fda0f9b51ddd4545fc4bd8","sha256":"b8c2b18ad81fe2794dec033f836b9526e9feb5610129a4fca80a4f73e877b377","sha512":"db1df40517bdea2950461d37c0022b60f47dbaa33fe9413f8333e7ae25ed7dbc5955a8c0a3cb863824b2ce069c40b3e95ba3242187fb5a8f7c78e37a8bb52e7d","ssdeep":"","tlshash":"c3c08cc4f0e33e002a02a420a0af34e8903440a6704c3b129da8ec582ea25f08233edc","size":151,"data":"","first_seen":"2025-12-18T00:45:38.454098Z","last_seen":"2026-10-09T17:11:00.662975Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"442e563bffc022a7e215e0dc3d1b7db7","sha1":"5e09092480598b297f6911114c3ec43b865dfec9","sha256":"9d9986257ac4d017cc380a7590baa2f07e159337a32ebd7a0d51c7dcb6e67d81","sha512":"24f7cd1cf8c3ec2183aba2c6f060d3ea7478b99505c63921287f9d49a21e8f1f7b5e88b1298d41a2b011c1bbfbe92467ff110385c04c80556eda6f828f99865e","ssdeep":"","tlshash":"96c08cd4a0cb6d005642651012bf36e4903440277058ab038da4d8882e230b4a233e98","size":149,"data":"","first_seen":"2025-06-19T19:53:11.38372Z","last_seen":"2026-10-09T17:11:00.689406Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_2067wpqq.js?v=1769639669","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e71490a7ca869de6343d4c9c5dd8e095","sha1":"30e31eb922a42cd4f4293d624752a5ce003ca821","sha256":"fb935ebee76cc44a58eb2bc65cdf8898620cf60b5115d70bb589f3ced183b809","sha512":"88f1b72c8b86ff4884cfa2f2340f0ff1e9097e5365f782d775ac447d6b13770547b6f9ab3d8cfea54c7eaffdfafd8ef0f2e961cbed084c96a4cc6611ae283d0b","ssdeep":"","tlshash":"f531dd525e9985731933322a9b3bb22cfb3127031501de033efd6700af31d89aa65ec5","size":1818,"data":"","first_seen":"2026-10-09T16:08:26.835501Z","last_seen":"2026-10-09T17:08:51.961898Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94318a58e4b9a3aa0b22dbbf37d0ab90","sha1":"ba9e535b20fffb2ad169446cb161365678260d9e","sha256":"520800d485a3a066bd5196ca0ebc1ce86cf0bd39908cf644a3460c99be833614","sha512":"122a8aba1141ea39d597fc9e7b8ab2d72e57a52be0899ff0141b657cfad30cb5be369dc04b07edc437df4aa91e1a2ea0a8fb76525e59c3b574a5db96fe4697a7","ssdeep":"","tlshash":"11c08cc4b0c22d002602641020bf29e4a024446670485b128d94dc482e634b08233ed8","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-10-09T17:11:00.690094Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dc04525caa1a384f8f939f263003a2df","sha1":"7ee80479861fc6580a67757beae96ce4793168ae","sha256":"18ab5411c20c30007946f0636144273e8e2fdbe06da91b3c7d853280853b7c7f","sha512":"98faa9495858b9889876296f263173740963118b4be0618560c916497f1dfb4071c7fe322606d698a90c6b8a0ecd593e8530f0a24786e837ddb1a59cec4689c8","ssdeep":"","tlshash":"f4c08cc5a0d22d102606685014af25e49024803674881b028c98d84c3e220b49233ea8","size":140,"data":"","first_seen":"2023-04-27T07:37:24Z","last_seen":"2026-10-09T17:11:00.67942Z","times_seen":3008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3d62ce07ea2410ebc7ab30b0f631a654","sha1":"e025312c90e1e4e541666aadb19ac3d6b5373820","sha256":"80efa2fd8bb5dfc8af8f25a434f2548643e1fa6863f4891bca2db217aa43793e","sha512":"227ddb7c993249cc1cf11638b431fd90e151127c03cf5514fcce7e0c66177a8b985c30f23d617da781ee92a1f38f43eff13a7e1710cf100da192ed6b5f54b9b5","ssdeep":"","tlshash":"23c08cc5b0c72e002a8275945eaf24e4b034c82bb08c2b538dd4d8892e230f89237ea8","size":159,"data":"","first_seen":"2025-12-18T00:45:38.459982Z","last_seen":"2026-10-09T17:11:00.690766Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"334c1df9d7cbc3519a286d40bd5ca18b","sha1":"4fdfd44666132f3539c0c90fa78b7abeff651ced","sha256":"0e24d6adc0a7c495e77fb86233ff7417053d1262b0fd0500c3e449a7ba621673","sha512":"2bf2f7bdb7821f75cd98877cf9f6066fd0c8dc2997bc9a26ec3206b8501d4cd6a189f960f8a4c8aab186a295d509eb0df47a8d13e9c73afcb90e87a1447f581d","ssdeep":"","tlshash":"b6c08cd4a0c22d002602681010af34e490244426708c1b03cc94dc983e220b48233ea8","size":141,"data":"","first_seen":"2023-09-10T00:20:07Z","last_seen":"2026-10-09T17:11:00.664178Z","times_seen":1759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c896fe06d9a7e47486eaaa4696f01887","sha1":"a4f04141387204d4964916f6c2151338d26c004a","sha256":"54b0ec33af575a4f55be5cd937bdcba5a584aca4c49e4f1f969c742d0c061ebb","sha512":"7e2abfa331d281dc3b356d6e4950e38df3983f68fee3795086843241cfa200ef2b229b6371eaa30e31c9f55ba15ba4912865fdf4c7509ad3163eff717056527b","ssdeep":"","tlshash":"5cd0a7e8d0a77c0123195732f05f6ae4b02a4426a595151baeeef4983967070d33ff59","size":238,"data":"","first_seen":"2025-12-18T00:45:38.467663Z","last_seen":"2026-10-09T17:11:00.681666Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"003aaa34c0e3e53213656d2672de5843","sha1":"148bef3d1cae038554629d9e7bb0d6c5ca00d0df","sha256":"ab3c1f6b212fd128cc3b06d7289aa24268eb1047caae48ef63121e5564870d01","sha512":"98d4037233f6536194128b2dbfd1023a8ce379a6e3164aa6a5930550027e1ae22c07ad35ef962865b13ad9a550fc49f21bdb0fc2ec28572304d2885b94cb438b","ssdeep":"","tlshash":"13c08cc4a0e37e102a02641150af25e4a028402ab04c1b528c94e8883f730b48233eac","size":150,"data":"","first_seen":"2025-12-18T00:45:38.456988Z","last_seen":"2026-10-09T17:11:00.687812Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75613a75df7083d017312b7f8e7980f6","sha1":"31f2c42a87ea52c4c03fe31d5f4954d67e97df7f","sha256":"635369d81b2562052574b75c31111eb0f556348006ffc95ac0a2bf393ae1c10f","sha512":"892b8609a63fb9dd10a53f88701cae4a871f38e8062c6e5bbbc78bf4e90590e55052ca800df675c4750743dccd2f3db90f24a36adea5bf124a6a058b2415cbaa","ssdeep":"","tlshash":"42c08cc4a0d22d002b02641051bf35e89024802678481b128cd4e8482f230b19233ed8","size":143,"data":"","first_seen":"2025-12-18T00:45:38.469771Z","last_seen":"2026-10-09T17:11:00.66356Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7a62101054a07c1bb663cb1bb96e730","sha1":"b5f61a388ccee33592c65ba31f56c0db8483d4af","sha256":"11e55da9e155cd258e3ea566ac97780f7e14e68a392084b32d2f975fbf6aabdd","sha512":"f561f5f35a7055063302ef42d002f4645cdc2156304652b7c28db8ee71ac60bb6ae9e6b14a629ab90d03fec63fad3642631b42b804c070874134f558505d6bf1","ssdeep":"","tlshash":"08c08ce4a0c66d006602651022af39e49024802a70486b029ca4d8482e630b08233ea8","size":146,"data":"","first_seen":"2024-06-12T10:12:11Z","last_seen":"2026-10-09T17:11:00.674211Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/i18n-CAp9ei0o.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67597313edbcc7d65eb25b76efaf7a26","sha1":"16f8e5a64fea7bf5a9f7954b426cfd85151dbede","sha256":"48236d7270a0312c7c7be5c20bd9496bc9169bebe020bd12081b06f750bcd100","sha512":"ca40b111c112cc5248da918f3254d50a584eb186762c2baf812c5b7cdf6d72286934530b829833151412c584766c3769c1bfe493ec91f6ff7d141cb66f823581","ssdeep":"768:y2QiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:A7Uq0+/YjQ9vau7K8uVoV","tlshash":"8453f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","size":60838,"data":"","first_seen":"2026-06-23T17:10:34.668284Z","last_seen":"2026-10-09T17:11:00.633248Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f25544c703b5069d2e247a99c2cccbc","sha1":"842509e48b0b34006a78d3935b2e1112775435bd","sha256":"1436a199ca6fb3e760dd3244bc9e5f8a2aaf91cd33c6b58a60a093a8ce54a065","sha512":"e02e5331170ccbea51e69bd876535c2e08418343a5d7531dbed8d84d1190d702419c40688743cb83bb62bacccb10dc2e387a4048da30785f405d5a8195efe26f","ssdeep":"","tlshash":"89c08cd4a0cbad005682a51015bf36e4a03440267058ab139ca4d8482e230b19233e98","size":149,"data":"","first_seen":"2023-10-16T14:25:23Z","last_seen":"2026-10-09T17:11:00.670444Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"34fe4ae570036e85b5a70944dc34681c","sha1":"6da3b974c96447d0aa68086f0e22078efd3f491f","sha256":"d6189af1ffd9226e40da8dcddb37ec738b1085c5c093af023f7b7667c1969b64","sha512":"e98f5ae46a462a83a57dd557cc5aeeb03d893f329f340f3d13822f182d36cee4413d0d97b010e23c1caa2033216d201cb72f8c34fa1c833414fff314d9848737","ssdeep":"","tlshash":"c7c08cc4a0db2d10aa06759415ef29f49024442ab05c5b53cdd8ec983e220f8a233ed8","size":161,"data":"","first_seen":"2025-12-18T00:45:38.436192Z","last_seen":"2026-10-09T17:11:00.658548Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"183dd93ec0ad779e8c27fd420037824e","sha1":"43858129580c7a1e702217f4af30d6462839832c","sha256":"c1e015df9f10d49fc2434b80d1c7141c726992f2effaf5afbdeee9c8722e61c3","sha512":"7915edae0f3f40c22d2661317908ec93152915ab9801af70e7ec9c7fc30f45b35d453a06117c1a42e044c7a3fa9ecbb0bbb85aef62af93c92f44f3cdf358ded1","ssdeep":"","tlshash":"dfc08cc6a0c76d1276066a1470af3af89028402770481b978d94e8483f220f4a233edc","size":158,"data":"","first_seen":"2025-12-18T00:45:38.441085Z","last_seen":"2026-10-09T17:11:00.69139Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"111a92c4d66066afbac573d73ffac4bc","sha1":"e2591c0e1b889ddc1afb2a61ca1474c167cf46a8","sha256":"7cc231a763aedad035bcc99bd8aeb1ee8274f104b68da85a379472320a848d97","sha512":"898c23b421f5bc21b0ba1b3ef31df7f18a0d4c7606abb4e35706d6bf8fd17fec9e22d65ecf91683b91c7c1c8ccf276e8dd1c0485b675ac5fa2031f9b7b20d5a5","ssdeep":"","tlshash":"06c08cc5a0e27d0016126a6024af2ae49028802ab0889f468cd4e84c3f630f4c233eec","size":152,"data":"","first_seen":"2025-12-18T00:45:38.47717Z","last_seen":"2026-10-09T17:11:00.665366Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ede74e75dbb1611035cd62bfa1a0eea4","sha1":"7cfa11d8edf07d4bb08b50c42bf6f4ba231de047","sha256":"a168e5a14ce863e89bf7c1f53d38e408cac6e90cea284765b67eaf21c1f5c54c","sha512":"b655977f3dda2959b29e9cf51ca8694f25bf3368b1f0f615933c8d944dc9bc9f72b7ffb8777c264c4e09dff09d719dfcee74efd45d7b20ba02a9d671ddfc5e75","ssdeep":"","tlshash":"40c08cc9b0c33d007a06681454af35e490258427704c1b028c94ec492e331f08233ea8","size":147,"data":"","first_seen":"2023-06-07T15:49:18Z","last_seen":"2026-10-09T17:11:00.662312Z","times_seen":643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f44e760e14e580d7212376d454601acb","sha1":"b5e40b1b772c61696b4bdfeda0b8e41549e20120","sha256":"1ffa8f20ec6fed8af4ab76369c625a7347ae5d5192483ae0d67987071d6a7af1","sha512":"9f08196e919d1d342f213dd7079dd9e5eb0c86a2473b071b38eda597a113e640477969d55c6e0db862b2299e61f35cafe5a36511785bec839c9f9b773ff7d40a","ssdeep":"","tlshash":"1ac08cc4e0c72d042a42a82115af28e4a0244426704c5b939c98d9493e220b8a237e98","size":149,"data":"","first_seen":"2025-10-07T21:18:43.477124Z","last_seen":"2026-10-09T17:08:52.066189Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1791565695401","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d01a9b67ee9240dc32e98c3b198e071","sha1":"5a6cb15d03fa79b3b75d3ee4c7fe8b84f41a2943","sha256":"7ef21ceae1fa48b7819ffe4c6ba0a1448337ae26ca14afb76d827f53ac62676b","sha512":"ffe94b6124485679e5dcb0205f3aa1d75fa90b844a200388a45229dadb491915a458ef5f0134a28abde311078c68e9d8afb97d591f5976d8b3ec60c0f490a936","ssdeep":"384:m+6aLnFONgSMQDbHer4p7JCA8GaHJdRUO4zy4F4Syec71gA777/ZMTtDdJXWnnky:5xnFeMQDbHer4p7JCA8GMJL4Xyec71go","tlshash":"4d72406bebbb10724457b4365b9f264435268013294cdf203facded08f92a675217bf9","size":17517,"data":"","first_seen":"2026-10-07T09:46:54.450018Z","last_seen":"2026-10-09T17:32:16.434104Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b6ce6947773085721278649d83b7c3a6","sha1":"b7f4faf6b6844009b50c7040221f81e2dd940612","sha256":"3054fa372c7d3e059513dd7d40bb42eb6b91fc3e13645798cc0c1a2dd5705ac0","sha512":"bb5e544490a8cb2c26506e397d028fd28ec3c8bad4dc479e0b487aa0126bb969fd394c5c960923ddf13379b27aede44ea9a1a97c8d951416ed9e7448e8ba2148","ssdeep":"","tlshash":"c9c08cc8e1d23d20260a661120ff26e4a034406674485b1b9cd4d8482e620b09333fa8","size":150,"data":"","first_seen":"2025-04-25T08:37:00.641817Z","last_seen":"2026-10-09T17:11:00.680589Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da6f96e28f67a6157a3936ad9620e184","sha1":"2048856e2add65759547645f3d5b41f91e7b4321","sha256":"9e7533262f41352610208208fcd05bddb8400f22fb8c23679a5a58708612a0a9","sha512":"26faa3d2211fdc3a6ae217e658285f14822523bdad08cf3f71d691485d9427cf7b0ef8ec51a45009b6b3af00a5d9ae6b8026a0892fc017de748dfae3d9e852f9","ssdeep":"","tlshash":"5ac08cd4a0c72d002602681011af34e49024402670881b038c94dc582e230b48233e98","size":138,"data":"","first_seen":"2023-04-13T07:32:12Z","last_seen":"2026-10-09T17:11:00.659169Z","times_seen":1663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"45e98c7a4775eaa63cbcfb9ce3651408","sha1":"01067eb99033adca3416bd76299cccf1e0e5eda1","sha256":"5f04448d59ce65e6f33b972a2f3bfc4c86710f40809278f7d1728191b2fc7373","sha512":"bd3352f420ace97c225effbecc4e6b78e43d9e83342bb89225362eed2dd897b461fd73c8e39b5c9a1a0454403d6188f92ba7d708e02c049e46845bdafc85513f","ssdeep":"","tlshash":"16c08ccdb0c32d002612642150af69e49028406b74481b028cd8e8493e620f08233eac","size":148,"data":"","first_seen":"2025-12-18T00:45:38.470763Z","last_seen":"2026-10-09T17:11:00.685008Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/vendor-BHC4R3kY.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1244bd2fca9e11aa1db620c4f06fecf6","sha1":"11d6bc815a0b217af8e9b323f3d546b3c43d0606","sha256":"d5122e27ef03b1d454d1703483fc51f1054e9046ee778911897aee6b509c35d9","sha512":"75e7657675d22b1ddd2fbb0d22f29e93083d7bd1a79eb116c72c5c9786cac5f7e2c111e842aae7dacd775f8a0a721dce9fdf2517ba711d9cc64e66c40c9cea07","ssdeep":"1536:nyp4FfPoBgIA+vstBjefSVf0vzCcGiVe5KQ2aZlluO1XqwlcsptOVp:yCqBgIGjeqVf0vzNREKQzZXuXsrSp","tlshash":"06a308e93282b06253ea09e7007b4015f33a1959380e98d4f16daddb3d7744a91fbe7e","size":106003,"data":"","first_seen":"2026-06-23T17:10:34.721267Z","last_seen":"2026-10-09T17:11:00.62767Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/main-CILhItEh.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79bdd886923aaa98b6c8111aa3890cca","sha1":"d772da65ad4de6921fe821a8ecef0509e27f5588","sha256":"fe7792756019bfca9fa9dd1cfa2d11932d09d45cc96afc2ec1cbf6b584a0f909","sha512":"d31d2a6e1126f1a574c37df5d6fc083a7827da0a41e758fbd87e3dc641250177b9c4f84cfd8948ee262d8fc058cfaf452d5f2bbb32b0422d5d14524cdc4d8474","ssdeep":"49152:IrIjM3SYSIhRGvN6QNVfJ0RXiiUyAQ+pW3uKqZ28zqVChUyqG159pqVgKuk+jGT9:6D/34Y8ADl","tlshash":"1456af197252a1b857f3419260bb0501f2382f89f453c49cfaed4cdb2ae9d6e636973c","size":6000403,"data":"","first_seen":"2026-10-09T16:08:26.930954Z","last_seen":"2026-10-09T17:08:52.071524Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9987407846fd8eabd00ea05dc2ecc796","sha1":"4f8b8d95b45a1d4e58eb84976936e5809ee5446e","sha256":"fb8d04341753bed114d0854467ce2bed6fc49a26d6532c5992faddae0ebcc45a","sha512":"f804da9331a0b1dfbe45c5e41a73159b8528331bee480d67970e20557de1a9a2b43f1529c2e9e463a623733d1af0511156623d32222df974c8f5c5f372e03992","ssdeep":"","tlshash":"89c08cc4a0c62d001602681050bf24f490284026744c5b428cd4d8882e224b09237ed8","size":145,"data":"","first_seen":"2025-12-18T00:45:38.458818Z","last_seen":"2026-10-09T17:11:00.661069Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"170a0a2adabfa3df9f178716bf942841","sha1":"ac6457948b3f8142f8fbe331f13bf702b7e0a54c","sha256":"45bce9e470f9daf35851b9e83b496ddfeeb7920ceda2b2881eeaa512a9188eec","sha512":"c47f0ea38e1ebf1cf7a21d511f80eb073f3eb84d44c66a4881fdcc9f704dcbeb98b1380fd8336998eb01d4dcfe3ee8e685dbc3982bf0e1fefaf9964238689567","ssdeep":"","tlshash":"12c08cc9b0d22d106a0a641464af35e4a02440a674481b138c94d8892e630f09237ea8","size":148,"data":"","first_seen":"2024-04-05T15:11:06Z","last_seen":"2026-10-09T17:22:19.446261Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4a7b557a6bc7119eb92d3bca7fc187e","sha1":"3b5640116e7240ae869461b4a46a52b9764e5041","sha256":"e28559aaa8226d127b0422b6ae5f5f021a92f31da8979cfbae0d0bb49aea6dba","sha512":"93480da7d288d56df5147d57185d3f07a81e855381e580f4a18822c27b5b50d75fbeed06debc986a10fb0bc743e0e97ca4e159671aee2e5a799a790c9339c5d2","ssdeep":"","tlshash":"9ac08cc4b0c36e101692681010bf2de490348026b48c1b038d94e8492e630f0c233eac","size":146,"data":"","first_seen":"2025-12-18T00:45:38.476066Z","last_seen":"2026-10-09T17:11:00.659752Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"48f2ac09e3fd5d5db6cf7cf14486adf8","sha1":"6a0c10940cd7cc259fbb766fe235f8b16eeb17cc","sha256":"0ebac074858812decd76be1eebb3c7a7e73deda11c5a9766b66427539a859d59","sha512":"d8fd5b7af4a468ad6d34aa0520dc5ed8d8a56d524f15a1343acecd84332c737939838236f3e0a228828162b09fb54bf74dd21655fd6764e6707a697a62767abd","ssdeep":"","tlshash":"5bc08cc4a0c22d101a02745014af24e4a024402a70481b428dd4d8492e220f08237ee8","size":137,"data":"","first_seen":"2025-07-10T00:31:50.561143Z","last_seen":"2026-10-09T17:11:00.660329Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"28df29b9078c04f370ea117f0cf5623e","sha1":"8971460b7518981bba20bae3b0f5f3aaa5da92bb","sha256":"1695c3e8018ec74d22ea8ed6104c6e04e66ef9a4edac3d5a4a1cea4e1764dd05","sha512":"d59293fad87212dd1ebd3013d63b52be7ba1817776687978815386cc897e1bbf16555f4524caaa53d3229cd66d2742eb95319e46dcbe295400f6feacc1bdb4a3","ssdeep":"","tlshash":"12c08cc8a0c33e105606686019af34f49028402a704c2b029dd8d9582e220b0a233ea8","size":147,"data":"","first_seen":"2025-12-18T00:45:38.439407Z","last_seen":"2026-10-09T17:11:00.665993Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbc4535837e4b66304063b672a89d710","sha1":"08e4f0d983b92af61639474f049dd0aa01164366","sha256":"c2cee43bb19be2e32f4ab66ac25217f46cb450051fc9c4039cf4bee9eda1f4a9","sha512":"1c29392ff9fba4a70b305c1cd37398bccf5f74e2e8147948e9fd645b07cd592308ee2e8f931aeb601d41832c1dd2d5bca9e3d5c91139e5cfa0d8ff4964722081","ssdeep":"","tlshash":"74c08cc4b0d63e002602652020ff34e4a0244026b05c5b829cd5ec682e220b49233e98","size":150,"data":"","first_seen":"2025-12-18T00:45:38.457941Z","last_seen":"2026-10-09T17:11:00.678079Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-10-09T17:11:00.666579Z","times_seen":3300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-10-09T17:22:19.39575Z","times_seen":3573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"168bf713b6ad99518735899b0eead7c6","sha1":"700ed06f2ce59d58bcaa84312fb16ec077a4fcbd","sha256":"2968ccaf0f67d1302bd3b46e0746476dea68a5f4a40a73c1f62cf6f640c8da95","sha512":"eb05f4d87e1e5ca6d115fdc4ae1cf76ded8201557fcc3bf3fe29ed3118bb01eb00d3709d6d3b05e89035f8093b1c22e3ca62d9041e8a23c2b21d406386553514","ssdeep":"","tlshash":"dbc08cc8e0e62d202616661250ff26e4913444267088ab1bac98d8483e220f08337fa8","size":155,"data":"","first_seen":"2025-12-18T00:45:38.481598Z","last_seen":"2026-10-09T17:11:00.672289Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/#/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62a1e8914589074aeac2f019badf6dab","sha1":"ad932b414f7682b714945d7437c6435d455e3b3e","sha256":"b1dc5c64fcc6dcc5ffa60a53a5290dc4d63c925e1061a5eb1dbc434d8865fbef","sha512":"6b781bd1266d2e59e7c47ff7387110014db6dcbd474150ca7341643a097841ac79f131dc7e9082c547909ecd2ee7d44024b9b4862bf039cf2dcc88226c4dfc6d","ssdeep":"","tlshash":"71c08cc4a0c33d002a26645814bf26e490384027b04c1f029ce8e8882e220b48333ea8","size":151,"data":"","first_seen":"2025-12-18T00:45:38.466611Z","last_seen":"2026-10-09T17:11:00.661658Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ellevesta.top/assets/Frame%201-CUL4cChQ.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.568Z","timestamp":1791565691568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Frame%201-CUL4cChQ.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-129c\"\r\nexpires: Sun, 08 Nov 2026 16:17:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONNU2xs5bPTyuiW9gTksn%2ByqMu16aWS6%2BabjUiAuhx1kG7cWXHo2UsWXy3OTqU9b8V7cZX4wBDfQcPspUNsyXszG86bFmWrKPNL9ED6Kh3ub%2Bcjr0cnIvKZJun1Ki4%2F0\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":4863,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit colormap, non-interlaced","md5":"8d212c8ea1591dfa2ba2794f71335ad5","sha1":"d4a46b85989a0fc68543d47374d7fb23b9533649","sha256":"db3891a7c41e37fcb3a5e36143a9c032486bdb2fa3baf924407a47b6a302e276","sha512":"ff704746c4dfe41083ec85ae9f9b807d3dc784b4055bd2ec149c4f8846966b55ee358218746f767e28c7778cdeadab955f976f4bc3c1e022320c7b0df88e34af","ssdeep":"96:Zj/zFb6cLBHNRnCWjwKWsEUW18YYbAcUsFXk8ZpRw:N4cLBtVCr9kAcpFDvy","tlshash":"74a18d25b470107e48e2d366dfae5cc200c4401e4c662fabd28a81bce28cb996473037","first_seen":"2024-12-26T23:29:40.085743Z","last_seen":"2026-10-09T17:22:19.369409Z","times_seen":240,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/option/rules/getTeam","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.584Z","timestamp":1791565691584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"OPTIONS /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://ellevesta.top/\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJmZxJnZAJJoz8TL7zDN2ZfoMJ%2F5db3EKi8WbhIljON6ir70vDLbPQ6YcYuicwtR4qkGKS56noLAPyZjOQ03yv0sjKE5%2Bm8ukZNjEemTViCmCknZWxLRCyYZQMdai1ZDVmNicbPnAT0OXA%3D%3D\"}]}\r\ncf-ray: a47efc650a173181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":948,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/tether-trc20-C6wMdRj0.svg","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.567Z","timestamp":1791565691567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/tether-trc20-C6wMdRj0.svg HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-4402\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Gt5ewRc1qgC%2FpfKC8rMH2jyFCkdtQhtRDBsfiJg4g1hfki67DJBf6mvUfdSdhW42Uk7ykvC6XruHSktLVikb3Va1BNfCKvFVJyzerGoyG5n7n2N2nx3xgpWUnjlcz4K\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17410,"size_decoded":8300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1720c9bfd83c003a2ef197d00b79070c","sha1":"311faa8882d9720b32e5c49a36309ffcf963b71e","sha256":"1eb72689005177f36a9583f9667f910817ff40f23213015a6410a9c73d02e67c","sha512":"77ca38ad2f53b327d8074ee2799d97cc491e54d4e6d56ba98c7fd39a1746ce7df9deacd27ad5fb6cea82eba47989455ff7d8c0ef98883fbc75ac1fbc333192ba","ssdeep":"192:VEjiqmX56SgbTYLMp+y3rQECou7QpgyD3Gy+qIONDqqPxZmTyMCyGYCWo2+TK5wj:kW56SMp+GrQEXuQdN+glOLb5+rMOQE/","tlshash":"0672c6c43775d3fcf401fadeda2630743d0e64d7a6a244a4c7722d09b45a49c9e958e3","first_seen":"2025-12-18T00:45:38.419526Z","last_seen":"2026-10-09T17:11:00.620921Z","times_seen":28,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_diy_2067wpqq.js?v=1769639669","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.185Z","timestamp":1791565692185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:58:47 GMT","end":"Wed, 06 Jan 2027 00:58:46 GMT"},"fingerprint":{"sha1":"EF:49:25:60:B2:32:08:EF:34:E2:3F:6A:3D:DB:36:CC:65:D0:3E:68","sha256":"0C:C4:50:B3:EA:35:41:1E:03:4D:24:0F:29:25:10:F1:FA:6D:B2:62:8B:A4:05:E8:B9:31:73:0D:D4:E6:28:CE"}}},"request":{"raw":"GET /js/ai_service_diy_2067wpqq.js?v=1769639669 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:08:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 05:15:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69dc7bfb-71a\"\r\nexpires: Sat, 10 Oct 2026 04:05:29 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3765\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgjVLd9DhZCre0X6AyuCYB%2Btx1nfZpFWXesIdAq0qUUIgBAnplg8yz0x999jkKFb%2FoIVULQP2dMdcCkKfmcOrTQyt1ELSm7Ttix48XIBgwNzSQFyxwXS8rCza0UNKJ664vOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47efc7bde3856b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1818,"size_decoded":1382,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e71490a7ca869de6343d4c9c5dd8e095","sha1":"30e31eb922a42cd4f4293d624752a5ce003ca821","sha256":"fb935ebee76cc44a58eb2bc65cdf8898620cf60b5115d70bb589f3ced183b809","sha512":"88f1b72c8b86ff4884cfa2f2340f0ff1e9097e5365f782d775ac447d6b13770547b6f9ab3d8cfea54c7eaffdfafd8ef0f2e961cbed084c96a4cc6611ae283d0b","ssdeep":"","tlshash":"f531dd525e9985731933322a9b3bb22cfb3127031501de033efd6700af31d89aa65ec5","first_seen":"2026-10-09T16:08:26.835501Z","last_seen":"2026-10-09T17:08:51.961898Z","times_seen":9,"resource_available":true,"data":null}},"time_used":3192,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":37,"receive":0,"ssl":3149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/i18n-CAp9ei0o.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:10.524Z","timestamp":1791565690524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/i18n-CAp9ei0o.js HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-eda6\"\r\nexpires: Sat, 10 Oct 2026 04:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxe7%2BbApy%2F%2FrvUnBXhy6ALop4ZSV4vlUYsUqyPPosh3ZNUTI9dRU%2Bxk%2BemcOtMvvAn4NNq654eFl5SaVav%2FLlOxUK32apUepNCR8ZVCgO46q%2FaQ7Lcs8VHVkUL%2BUxF6Z\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47efc5db95056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60838,"size_decoded":19903,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41432)","md5":"67597313edbcc7d65eb25b76efaf7a26","sha1":"16f8e5a64fea7bf5a9f7954b426cfd85151dbede","sha256":"48236d7270a0312c7c7be5c20bd9496bc9169bebe020bd12081b06f750bcd100","sha512":"ca40b111c112cc5248da918f3254d50a584eb186762c2baf812c5b7cdf6d72286934530b829833151412c584766c3769c1bfe493ec91f6ff7d141cb66f823581","ssdeep":"768:y2QiGhPNpnRHADEsVoXVLfftjE74t0DlQ/Ak0qVdKa5NcaGg4v0w63ODa7rgEiX+:A7Uq0+/YjQ9vau7K8uVoV","tlshash":"8453f7d634c7b012977a56e760b31005ab3e1b19340ed8a4f1bcda873e73d1a82a7f59","first_seen":"2026-06-23T17:10:34.668284Z","last_seen":"2026-10-09T17:11:00.633248Z","times_seen":16,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/option/rules/getVideo","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.559Z","timestamp":1791565691559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"GET /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cL2OiSX6QqJrkKeC3EDE4SrmmsQ%2FkUGUUaplhEQ%2FfmjlI5j55Z%2FvBXDXMTTUDeoKBVRIPllAVP6%2BSAINML4B9ZJcfuGAJ9uLccxN7apd2ctFS5mx%2Bu8O%2Bqhz7%2Bn%2F1s1fn%2F3lBqx5vJuxkQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47efc668adb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":963,"mime_type":"application/json","magic":"JSON text data","md5":"81ae7b078049a2219423ceba1954d734","sha1":"2cb328ea394c7763c33c127e3d5a03c2448b35d2","sha256":"3d08f73fd242a824c195d98c511c116d537c56670dccdcb6973f8e330d88bbf6","sha512":"098ba5c9515986f67bbec970e534f91f1d3d5270ae726eb215645bfbaf6c7337fe42aaa7c8c9b374740fbcbf22e4507122d44b6691f74f1c05447f9a2d6ef455","ssdeep":"","tlshash":"318004311c0cdc43740334cd4107474010d4305057300310cc5c5134c7041747441c54","first_seen":"2023-11-15T10:07:01Z","last_seen":"2026-10-09T17:11:00.635884Z","times_seen":145,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_7-CXcIvExM.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.579Z","timestamp":1791565691579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_7-CXcIvExM.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-44f6\"\r\nexpires: Sun, 08 Nov 2026 16:17:54 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3017\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwVVa9TSN7mQsH06HCviGVESMC5dAuYeH22IOejx6pd8xp0zbsw31w2ZlKak1BZvdIuAxK8gyp1f6V4X%2B8kemfPsCXtYGdfJU74EviKEgIbag%2B2cFnREeEO1ciu0yjXP\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac356a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":17171,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fb38101b080f0069632af23879f5d08","sha1":"2264f6840d544cc320b59f9861361125ecbca8e3","sha256":"2894d936fe42d3f8357e682c477c6d515f04b78e5b6efced7eba1c03b68f2d68","sha512":"5c45290fa25cd3cc00b06a44a1e11802bcc17b3a39395ab1ca17eb1fef7451abbc47343736a36b4359a3801c1e32a4d872285f9c1bcf76bd8dea8a009a61c17c","ssdeep":"384:Anh3XfgBbzg7igsb8vd81SJE6W/TvVqF9wj2iLFRQeNj8t8:Ah/sgoUq1SJEzTVk9uLItq","tlshash":"8f82be80621318a0ae6c964452be75bba9bf098447e8b0b4ccef8537b4747f9cd245db","first_seen":"2025-02-12T08:38:06.875638Z","last_seen":"2026-10-09T17:11:00.634015Z","times_seen":166,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.09d6a0bf3f2f14a7795507cadcaca200e.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.354Z","timestamp":1791565692354,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09d6a0bf3f2f14a7795507cadcaca200e.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18293\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7D7CD23C3632AE5C1A\r\nAccept-Ranges: bytes\r\nETag: \"61E5673576E629F8C4E614C01393AA9C\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6515450579863328672\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YeVnNXbmKfjE5hTAE5OqnA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":18293,"size_decoded":18868,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3","md5":"61e5673576e629f8c4e614c01393aa9c","sha1":"6ad9e64b55863c57f4fb3c8837ddb3708cd2f532","sha256":"823157919a538cf2b75866e8dc3c015ba3adcf72bf23b274fd6e6e0d0add4baf","sha512":"05587e3eb2ece57e4da17fa819b5d6a36665f3b6ac18c3e1cb778413591d5b0c5ac3dab2db66880e815da55f9ea5923e6da47e86ae25f97e30e11f35835f55e5","ssdeep":"384:rMU2Ari9evZy54/kJQL5HloOtVVZkWYAcm/Nl0WFpvFpl:rMlMiMvQYauLRSUcmVqWFpNpl","tlshash":"6f82d16b32e18911e213d73f5c0204591e1a7a16c2fc312e6df59af6e934aed1608e7f","first_seen":"2026-10-09T16:08:26.912422Z","last_seen":"2026-10-09T17:08:51.964698Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":-1,"dns":0,"connect":263,"send":0,"wait":267,"receive":0,"ssl":801},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.04ef1f0d1c2474ab28ccac66a5827b1ee.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.358Z","timestamp":1791565692358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.04ef1f0d1c2474ab28ccac66a5827b1ee.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 80579\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DE613583238E01555\r\nAccept-Ranges: bytes\r\nETag: \"719A5EFDE529C9381D37608E98C7BB26\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11928070475292525171\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: cZpe/eUpyTgdN2COmMe7Jg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":80579,"size_decoded":81155,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x533, components 3","md5":"719a5efde529c9381d37608e98c7bb26","sha1":"0679ecc0c75bd9f9fde839763047f1f111ac27e0","sha256":"621b9620fb85ca439100a28e7bf623d92d15975de5755c96f544c15e8ea5a775","sha512":"0197a9dae35d2626f0358c7aa9500949c3a65f42a9d741df1c5e0cf587ca61633277b9fba1319fc1eba2979f9976efc7c38bfd3c60db93c785b5882e4ed753c9","ssdeep":"1536:XRdPQKX9Oiysr7ge3HNiVAy0x4LfrzX6sLUH1Aba1gZ:L4KXeQH0VAN4LfnBa1g","tlshash":"df730158bf55ede3c604d2b09ad84233671ddcb19bf0f2c968a434d304a1991ed2dade","first_seen":"2026-10-09T16:08:26.88942Z","last_seen":"2026-10-09T17:08:51.965392Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":-1,"dns":0,"connect":261,"send":0,"wait":270,"receive":267,"ssl":789},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/assets/style/css/chatStyle.css?v=1791565695401","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:15.999Z","timestamp":1791565695999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:58:47 GMT","end":"Wed, 06 Jan 2027 00:58:46 GMT"},"fingerprint":{"sha1":"EF:49:25:60:B2:32:08:EF:34:E2:3F:6A:3D:DB:36:CC:65:D0:3E:68","sha256":"0C:C4:50:B3:EA:35:41:1E:03:4D:24:0F:29:25:10:F1:FA:6D:B2:62:8B:A4:05:E8:B9:31:73:0D:D4:E6:28:CE"}}},"request":{"raw":"GET /assets/style/css/chatStyle.css?v=1791565695401 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 16:46:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ffa1e0-b303\"\r\nexpires: Sat, 10 Oct 2026 05:08:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kr4jM%2B0acDga8fpZrO0GN8Iyrp6byvGSurGZpgvrWXVRK6rbDav2oTdNbxlEuGF2hP%2B5bzhZyw0ueC3eaqUZ3jfIEGAwy%2B3xzqYjxBa1FvlhzsuCCOl%2BlJJ1mh8mrF312quc\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47efc7ffe3c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45827,"size_decoded":11028,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1414), with CRLF line terminators","md5":"7f04d716a07903513dd26bdc041cded9","sha1":"87cc4821c93b3691c2cc6ed6c07504f9c5030d5d","sha256":"eca5ab3a8577e84adaf245950a20cb525d5c762c14576671dbcdfc9a46de476d","sha512":"f4a86fb88cfef3906b7debb45e8d4d02a58f4afbb14ff8479e630c3f8c84f97be7d3996d3e399f29498f31066c28fb7a63d8a83e00bc151686e434bf796cd0a5","ssdeep":"768:b8hjh3T4m4G4/4y738BY8+kJYcJHJlxGSndLcR4xhQ14YYi631N8VNi3rdwLcKda:Izr9l","tlshash":"b423433ceb65218da123b4a9bff16be5af514013df0b06a5b5f17a38c2504bd39712d8","first_seen":"2025-11-30T14:17:39.779365Z","last_seen":"2026-10-09T17:32:16.443777Z","times_seen":328,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/platform/Ellevesta.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.252Z","timestamp":1791565691252,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /platform/Ellevesta.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/common/getAllSetting","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.564Z","timestamp":1791565691564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://ellevesta.top/\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BFBWv%2FkIW1tBwJdB3Eha8phbN59Xf3V6u%2FGV2lUtWqzKBljoj5g5EdGqa4Ud0TFcdqjCGjBBJ8jREWQ0a0SYsTDkCfZsqfA4XQZcJlUzXq01ATg9dlehAYmay%2BGRLziZA7wdSn277xGDA%3D%3D\"}]}\r\ncf-ray: a47efc650a193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":81,"connect":40,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/tether-ton-Ap5k4xv-.svg","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.565Z","timestamp":1791565691565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/tether-ton-Ap5k4xv-.svg HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-2bbc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1z%2BWqa3k33FxMS4oSAyo2Xg4ionCxnH26KZN9G55qjVHV0b3iPRyqxim2Snil8wHaoz2rzTAhTHMJ%2B2R6JI1iu2p%2Bael8luJbjDeI80ti%2BPEiqiracwVq0SEIyLd3Fkg\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644aad56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11196,"size_decoded":5693,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8a4c286d806645a1ae1bfaed7a93c15","sha1":"aa4eb6730dee726f3a25951f7e1092f705fe78f6","sha256":"b19ba08d6cd005c06320a27884e97a1d6f8358bec6469603a6728d28a221ed76","sha512":"94fcd2adcc80761d51b71ed36b3a9e7882d3f45ec67d1423ea7982dea6722a336ddcf69c821b8c183d9ef9945be1f1fd01ffe1ab4f3f786eeadc46578e85e1ab","ssdeep":"192:DaVTAcVqcfsYLMp+y3rQECou7Q7l569ZnwVXdAeJ0GaQ1btXZO9MQxIMOm/K0UOe:rcqcop+GrQEXuQ7r6cAeJj1x0yQmMOg6","tlshash":"7a32b8c4377ad3fcf401f6ee8b6570742d0a68dbbaa2c4b8c3721c19a5565ac4e498d3","first_seen":"2025-12-18T00:45:38.40295Z","last_seen":"2026-10-09T17:11:00.63169Z","times_seen":28,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_2-DlfMR8Iv.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.573Z","timestamp":1791565691573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_2-DlfMR8Iv.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1c70\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zg%2FVzmQgmRVZUkkQCzlE30tQGcG2J%2Bh%2FmsNiy%2BdcYYOewpywRAXalv%2F8idX9juKOTxYa6%2FLEC%2BonfOGXpOxBzOdLbFh79suDGybtnVCJaTUCCpol7UxgH%2Bv1F7HJY0eH\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644abc56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7280,"size_decoded":8102,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"3bba6d7047f93b8079b6574966141522","sha1":"6315fa7577ca55f1ea3f1cbdbf1d8c92b88646ce","sha256":"45b87f2619cb785de2ea69042fbad87abecc7d73e6838f6e7e21bb7a4fc24dd9","sha512":"2460ada343603c0555e7015a28f8d72417166827be8e300a741f6557adc9e5aded4ef7d6294f234e777851afa3d39586a8bb61fe461727efda1a975b070b22f8","ssdeep":"96:fSo4ltvV8m5Zcw/IPgUW0Vc0BpNZJfqa6hnliuUxWNBgPe0pSipGDhreyCiK:fSo4rvqAZjiBzZJyaslNzNuPddkDhrV8","tlshash":"8ae1affd77d102087854606a154710309ad06f1beae4ffc689915b839a0b1fcad2e6a8","first_seen":"2025-02-12T08:38:06.871461Z","last_seen":"2026-10-09T17:11:00.622148Z","times_seen":166,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_3-CZAdRCrv.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.574Z","timestamp":1791565691574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_3-CZAdRCrv.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1476\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHFTzRqCEMjqwgta56rWVXaAT9jO7Yr1J7LLw2x5papBh4gfF5xfX5%2BWZmttfIEqq8LUJ2MbKvFgwRdGh0cHko%2Fn%2F%2FncNpaaLp1mWkKpDs%2BeSZFF5OHe69lbdUhw1HzB\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644abd56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5238,"size_decoded":5690,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"44e1a5b762465a0eb365f3f6fcc1d60d","sha1":"0acc5c63c3660a7c702ae6957c4b827574ea07f5","sha256":"186abff8e623d5232e4d46a8719269905148ee6b8dbeb47ee45878568fe6bf36","sha512":"f61cde643eb6a175d0e0e4435503a05d0d982e475ef31704096a9767e1bd2bd91e830e056f702626a919e06f6277119f4cbb4f282e9b0b014958ef79eaac93ae","ssdeep":"96:NknS2ia5BOmDq6Q0bXWl/dLdt/mTzv+zIkPJcFciGB:NknJBOmG+w9dt/2VEJicP","tlshash":"bdb18e6a8641ed4039cb8fc274e58847c371e048a3f0972b19ddda5e47378a8dd694ea","first_seen":"2024-12-26T23:29:40.099933Z","last_seen":"2026-10-09T17:11:00.648896Z","times_seen":167,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_10-oM9rJNnh.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.581Z","timestamp":1791565691581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_10-oM9rJNnh.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1e85\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOwFJBGzfZWKiT4x7tA%2FjZ%2BN%2BcpV9KVBWRnrplQSQ%2F2zCdrLplvGAhxWLNjMSZ9cT7%2F8L2KYDA3qp3kI2wjbBhYn7bzvlX1EXMvduM22VA3uiKtGxSiDrsHHqYcnnrXj\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7813,"size_decoded":8589,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"ee91dd1f10c738a951cdd6d6f56c6d2a","sha1":"0f18b1339f62b322f0ca87bba04d7274d9cd6327","sha256":"66bca87cc8e292cc6a136f92fc1cf68f613195bc9b393aa90de3688565521bc7","sha512":"f6c643c252ea556ee6eeea30c1fec6bcb34682601d0dc99435acfd70ef1e48987c5b01a83d327343ba59a0f4ebcd5a49d3cd3b61db9a0c54faaaddc8c9a493e1","ssdeep":"192:fStX5dARBEEYxJg1L4f5aZzsPhY9706OTHEL:K5LEEEYxi1Uf6IPhko8L","tlshash":"7ef1bf40648a2e63661e7d48c2e0c5b557b655cf5338c35bad3210fd15e6281ee39ca7","first_seen":"2025-02-12T08:38:06.881528Z","last_seen":"2026-10-09T17:11:00.623179Z","times_seen":166,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/option/rules/getVideo","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.585Z","timestamp":1791565691585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"OPTIONS /api/option/rules/getVideo HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nReferer: https://ellevesta.top/\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91LAhTma1J2R0IMOxMAXfawV0Jtnvom8%2Bdo%2FopiJnwX6VZpMFapxjpjXA0K3jEnZcPcCCat60O7vpaMRWKIycP9nDejKEFxQopWC15Blqpw9m4pjrPpt8nR%2F7dWYzuSqSPmwImTvihPQKA%3D%3D\"}]}\r\ncf-ray: a47efc650a183181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":950,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c2ae38592c9a49d6ad619f174f34e43e.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.187Z","timestamp":1791565692187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c2ae38592c9a49d6ad619f174f34e43e.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33170\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7EACF6C53338E615D7\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Max-Age: 0\r\nAccept-Ranges: bytes\r\nETag: \"F69B69C8E4D4974CBF6D7AAA74029A94\"\r\nLast-Modified: Sun, 01 Mar 2026 07:00:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14231532308672847092\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9ptpyOTUl0y/bXqqdAKalA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":33170,"size_decoded":33846,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 730x701, components 3","md5":"f69b69c8e4d4974cbf6d7aaa74029a94","sha1":"897115257077a9e9a3a710590c2ddf27fac2d1e0","sha256":"3523bded033f2fafafb0de719ff540596ba6108803c623ee6d9395f207327b9f","sha512":"3ac03478ec9a1923f27844df32dbc4a34cb6091bfd0aa7531a4052e83efb7139c796166f2817f71ddff6385a31d525223ed5fe4efd67bed9e800ed14872056fe","ssdeep":"768:E4t9pXOlAl0O4BIjPAcL8ALGMGxxM9PumS+Kg5r/GWv9Y7:Z9pXO9O4BsD8AL3Gxx7zTgd/G2K7","tlshash":"58e2e1eec685d548d0755437c0d40bf2dfd97ea66388d18d0caac49c00a358ceacb6be","first_seen":"2026-10-09T16:08:26.883865Z","last_seen":"2026-10-09T17:08:51.969414Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2493,"timings":{"blocked":0,"dns":20,"connect":268,"send":0,"wait":276,"receive":16,"ssl":1912},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vip-cservice.com/js/ai_service_core.js?v=1791565695401","fqdn":"vip-cservice.com","domain":"vip-cservice.com","tld":"com"},"ip":{"addr":"172.67.199.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:15.403Z","timestamp":1791565695403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vip-cservice.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 00:58:47 GMT","end":"Wed, 06 Jan 2027 00:58:46 GMT"},"fingerprint":{"sha1":"EF:49:25:60:B2:32:08:EF:34:E2:3F:6A:3D:DB:36:CC:65:D0:3E:68","sha256":"0C:C4:50:B3:EA:35:41:1E:03:4D:24:0F:29:25:10:F1:FA:6D:B2:62:8B:A4:05:E8:B9:31:73:0D:D4:E6:28:CE"}}},"request":{"raw":"GET /js/ai_service_core.js?v=1791565695401 HTTP/1.1\r\nHost: vip-cservice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 14:01:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac4ff4f-446d\"\r\nexpires: Sat, 10 Oct 2026 05:08:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lyl1tx8MNaKQTq%2Bk%2FV%2FTvbXuX3hCGaLGF%2FIgHGmQOKFzLlPmlbg767Wp6EdR3lgPdAcwSPD23dGl8mvsWd1jXwxS7iLLgBNIQNae60QF5CJ8fLulFrmNb6CyYFe%2BfrsrTBnk\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47efc7c3c2749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17517,"size_decoded":5405,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (496)","md5":"5d01a9b67ee9240dc32e98c3b198e071","sha1":"5a6cb15d03fa79b3b75d3ee4c7fe8b84f41a2943","sha256":"7ef21ceae1fa48b7819ffe4c6ba0a1448337ae26ca14afb76d827f53ac62676b","sha512":"ffe94b6124485679e5dcb0205f3aa1d75fa90b844a200388a45229dadb491915a458ef5f0134a28abde311078c68e9d8afb97d591f5976d8b3ec60c0f490a936","ssdeep":"384:m+6aLnFONgSMQDbHer4p7JCA8GaHJdRUO4zy4F4Syec71gA777/ZMTtDdJXWnnky:5xnFeMQDbHer4p7JCA8GMJL4Xyec71go","tlshash":"4d72406bebbb10724457b4365b9f264435268013294cdf203facded08f92a675217bf9","first_seen":"2026-10-07T09:46:54.450018Z","last_seen":"2026-10-09T17:32:16.434104Z","times_seen":38,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/common/getAllSetting","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.551Z","timestamp":1791565691551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGK%2Fjywu%2Fosi7qGTy%2Ba4HHNu%2Fzckob0Fe%2Bzff6OnC1%2BIAgLMEyW4XStO%2Fh1Sb2bg98Q%2BJFgk1ZktYYoTPrLwgRDB2XMIeiBZYvhDs8zpGtLVWc602FjwWPlz3qVFD3Qx%2FvGf9uamIMWlcA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47efc667ad13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51110,"size_decoded":12425,"mime_type":"application/json","magic":"JSON text data","md5":"92e1eebdfb40dc7f3eee4ccec03db288","sha1":"e2b373f5ba85369d248ee5a99742124b461db9c5","sha256":"7e3ddddfa5b998abe7959c9294e25a53f2212a2859805071835aae91a6f1f55f","sha512":"646518b70af6732ae30635e55bd1eadc1776a15ea791fb88ccf8626df45317238940999e8a9dfda5f2478a6cc4e70c7d2e83ff66cacbaa6fd599a62708c557fe","ssdeep":"384:wZzrYQs6uHBUlN3toz4tpSzVfbuTMkMCMsqTnCCEQ:wlUQJuHuT3tozcbqn1","tlshash":"1533611eb054f8bdc799e8e600772a6b267d3c3beec91a98e1cd0d1c43a9471851b71b","first_seen":"2026-10-09T16:23:53.994339Z","last_seen":"2026-10-09T17:08:51.970789Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.elleves138ta.com/api/option/rules/getTeam","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.557Z","timestamp":1791565691557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"GET /api/option/rules/getTeam HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ellevesta.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ellevesta.top\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZaJqjuwACtv2DH9QxgxPIRXEWWtVafnAa0S0FdTypgFY3DIhxU0iyUv1%2BBNsFJ%2FbyJ8hkli%2FulzkrYw6u0NYEZ7e2hh9%2BDVDjR46jkJMQlZNzB6kwY1BiC42ygMSCsLtSpza%2BTaDXVwFng%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47efc666ac53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4578,"size_decoded":1594,"mime_type":"application/json","magic":"JSON text data","md5":"5a35037814d3f36940b375dad0453952","sha1":"c1a19913aa07ec90317a27d6a7e04771d0068d50","sha256":"30b77e08017dbcc43e73a5cb338ff1fc4725d88a771307471a2b24602cbeab09","sha512":"453cf981df97bcb2de3ecfb71dc780881417cedd52e49048151bc9cd45c56fb6e676f17b5bc9df3af2ad2cba55c67e638504fa8b53672732523713f352508381","ssdeep":"96:UcR/C4M4rk4jTd4M4rujTd4M4rzjTd4M4r2jTd4M4ryjTd4M4rvYjTd4M4rCjTb:lNHr5jyHrujyHrzjyHr2jyHryjyHrQjn","tlshash":"dd91ac051278cc7d6a68888352aa3d8875ddb71f92908d3c19e6cf1cadf8c7e1a1f54a","first_seen":"2026-10-09T16:22:09.789312Z","last_seen":"2026-10-09T17:08:51.972155Z","times_seen":3,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_5-C71n8onc.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.576Z","timestamp":1791565691576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_5-C71n8onc.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-4fb4\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWTNOI7TlyEvfF2KMbcSQTmOENY0%2BDXCxRRF9gRHfPFvSwCH4DcQRJIPvWiPApPcENaGrqHFD8fiYXuAgcuwDft%2FiDy7rCYylzcnZ0O%2B%2FafPTOCk0AEZdY9a8c36ID%2Bu\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20404,"size_decoded":20038,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"92aebd9e0e41071377fcaa664328e73b","sha1":"bca41b209ccb35004a1d926c4f5219e4529331c2","sha256":"df48430fe13782354a476bfa43769b893312990feec6ca44148f705d637d31ee","sha512":"28572d96317587904072f3ba65dc957fe5193e88121c213557038150b43fe06ebfd14eae7c33a5725ce1b05466de57b85eadef136f5d6b146ebe1cdbccd48694","ssdeep":"384:Anr3XfgBsR36w0j9hFNbDNe34iPtNPtshDwG4EMpUxgbRafnDCtDJbeDfibINeuX:Ar/v3oTJCDPzuRDDqCff+nATvqc","tlshash":"6e92d01db90bb4215e1f6150a0e9d23bb69356d024a0d571efcbcab1a8614fecb0f4d7","first_seen":"2024-12-26T23:29:40.10144Z","last_seen":"2026-10-09T17:11:00.650355Z","times_seen":165,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c2ae38592c9a49d6ad619f174f34e43e.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.180Z","timestamp":1791565692180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c2ae38592c9a49d6ad619f174f34e43e.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 33170\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DCE63A83331236AAE\r\nAccept-Ranges: bytes\r\nETag: \"F69B69C8E4D4974CBF6D7AAA74029A94\"\r\nLast-Modified: Sun, 01 Mar 2026 07:00:27 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14231532308672847092\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9ptpyOTUl0y/bXqqdAKalA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":33170,"size_decoded":33746,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 730x701, components 3","md5":"f69b69c8e4d4974cbf6d7aaa74029a94","sha1":"897115257077a9e9a3a710590c2ddf27fac2d1e0","sha256":"3523bded033f2fafafb0de719ff540596ba6108803c623ee6d9395f207327b9f","sha512":"3ac03478ec9a1923f27844df32dbc4a34cb6091bfd0aa7531a4052e83efb7139c796166f2817f71ddff6385a31d525223ed5fe4efd67bed9e800ed14872056fe","ssdeep":"768:E4t9pXOlAl0O4BIjPAcL8ALGMGxxM9PumS+Kg5r/GWv9Y7:Z9pXO9O4BsD8AL3Gxx7zTgd/G2K7","tlshash":"58e2e1eec685d548d0755437c0d40bf2dfd97ea66388d18d0caac49c00a358ceacb6be","first_seen":"2026-10-09T16:08:26.883865Z","last_seen":"2026-10-09T17:08:51.969414Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":-1,"dns":27,"connect":267,"send":0,"wait":276,"receive":16,"ssl":812},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0a9124ccbc88a484491c215702fe589ea.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.365Z","timestamp":1791565692365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a9124ccbc88a484491c215702fe589ea.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 60511\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DCE63A83331A16AAE\r\nAccept-Ranges: bytes\r\nETag: \"5EB9100E7629CAEC8E9E784FF1F5DC88\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13124402012218994748\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XrkQDnYpyuyOnnhP8fXciA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":60511,"size_decoded":61087,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 800x800, components 3","md5":"5eb9100e7629caec8e9e784ff1f5dc88","sha1":"160cac65d265402e7ad095d4092c3c233e84bea2","sha256":"382b72814ab9ba0b9dce817be5e1420ba81e9e78e0af08f18b3ab6090ed3116b","sha512":"4bf03c38507faa25f3d653ee74ff220ed384df66d1f4a77ef712ea5b2f59ca28158662830e0ee9ec79c45b64de1a85b8a0e32ea554e09fe35d1238a1a532b2d1","ssdeep":"1536:xrWrw76aITds/K4xv/HctYD30Vbdd/xJ1Wu4fpP:xy9BsCCr3sou4fpP","tlshash":"9f43f13b8b3e2749c5919b70cdb897e57f0b3f768271549da428ff3006923eca859162","first_seen":"2026-10-09T16:08:26.871118Z","last_seen":"2026-10-09T17:08:51.986687Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1528,"timings":{"blocked":1211,"dns":0,"connect":0,"send":0,"wait":280,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_13-Dtre4Edb.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.583Z","timestamp":1791565691583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_13-Dtre4Edb.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-35c4\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDRuX0S4GK7nwYZBitzKhGwYn3s7B0nOEoI1Q1%2Bgg3ouMolfmo%2FK1o25DXRJ9xR%2B6ht1k4YhsoDf4HlL8KOfqLzcnoJjSza5AG5MPyD0RWSgYUSc3TkvlxxjYfyobB67\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13764,"size_decoded":13423,"mime_type":"image/png","magic":"PNG image data, 500 x 160, 8-bit/color RGBA, non-interlaced","md5":"2c6e67fc2e060d5be1cbe4adeee0101a","sha1":"47a256417b8b8c8f501e46f45201e4de3002f4f4","sha256":"1623e3d17213444597dfd17cf82b953938427487c41cebf5f8d24bcab6ff1045","sha512":"5926dca7f68517e2e11fb30da9538daaa83dd4f2c732443c077ea15717fc8a6dc1a5b86fd1d56f456eab45d9892f6c8a038d1f4f68e72128a08a3643eb27efff","ssdeep":"384:4RDnt7dGap/Krho5yWTenohUtYQZ+o96BJ:yDt7Hp1enMUtY29c","tlshash":"a252af2f7d000d622e049ba51dbf80d683b188d1c8d6b474e759dc12ba7e7bb15cee84","first_seen":"2025-09-04T00:18:50.331142Z","last_seen":"2026-10-09T17:11:00.61717Z","times_seen":149,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0d1519b0bd59b43f782a8cb9438a903d4.webp","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.352Z","timestamp":1791565692352,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0d1519b0bd59b43f782a8cb9438a903d4.webp HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15384\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DC78BAF31317789AA\r\nAccept-Ranges: bytes\r\nETag: \"4C73397D2CD709D1076897DCC8B829C8\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17586631931603568344\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: THM5fSzXCdEHaJfcyLgpyA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15384,"size_decoded":15960,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 416x416, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4c73397d2cd709d1076897dcc8b829c8","sha1":"ffd9a6467427e2ce1889ba294ea66d35872ad7b3","sha256":"bb4d5164430e1760989ac3eaa122cbf3bdea45cf3f05b7ff59300cfa75f56166","sha512":"9cdb4fd0083842140d2dbbf6bde0984ba9bc0b09400ab178929ae8c682ce898a63b0239020cd18076660cb70ce9d8bf18cf0823d0d9812c02ce725e2d71348d3","ssdeep":"384:OAZz6DC3q8t0q3C8xfow6KqXnbr+Snn+Kupnp:Vg4qioZKa/znQp","tlshash":"bb62d03d40797ab982ca1ceab766696384baac714c529fd2f012565b00f843cef01f89","first_seen":"2026-10-09T16:08:26.90916Z","last_seen":"2026-10-09T17:08:51.988812Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":-1,"dns":0,"connect":263,"send":0,"wait":271,"receive":0,"ssl":797},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0027774e592264951b22df2ddd4e7c394.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.367Z","timestamp":1791565692367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0027774e592264951b22df2ddd4e7c394.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44690\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DC78BAF3131EF89AA\r\nAccept-Ranges: bytes\r\nETag: \"961303C5EAAA22E48F5A5149BEDCDACE\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14970192490811635726\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lhMDxeqqIuSPWlFJvtzazg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":44690,"size_decoded":45266,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 576x755, components 3","md5":"961303c5eaaa22e48f5a5149bedcdace","sha1":"ff6fd5d92f48e5f5768cd45a18fcc409ca09b697","sha256":"955bb8ed31718cd3ef438ae253d173315bceca1c73baf51802d698bda3872b1d","sha512":"dee44d0057d08c3a2e6b22afd368bd4c56d4151940f52841d0e90629b0b6102d3f2a2372412ba6c3ab470b889ba4d1f8cbd7673f22791813b5a94f2f62a6c264","ssdeep":"768:pFla0iHDeLLWZgwgUSLvOwspJOzUWM+WCdjChynhB51uo91XhcGNFDqbjY9Z/WsO:pFlZiH6I8ULws+gWM+WCdCh+51uOhcIE","tlshash":"f913f2043a5980def7c19d3fbb462af0148a2d648e2b9fa684c4190deb7e458d904fe6","first_seen":"2026-10-09T16:08:26.917505Z","last_seen":"2026-10-09T17:08:51.989767Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1612,"timings":{"blocked":1315,"dns":0,"connect":0,"send":0,"wait":274,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/main-CILhItEh.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:10.521Z","timestamp":1791565690521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/main-CILhItEh.js HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-5b8f13\"\r\nexpires: Sat, 10 Oct 2026 04:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuISZuj48QYeSb69evnpl%2FL2N7eklUBJxL6aComnD7gd5hD689MLUNjbNHdu7ydU%2BjsCrcOYHLBCzf4SbKTawph5qdzWeTgfeqX7obHngdX9u28%2Bv9jkdosovP1WWZHp\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47efc5db94e56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6000403,"size_decoded":1801266,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"653be72d55029427dcf0abaa8c814aee","sha1":"bd3da41567581204ceb4e7ad9c47cb8c2835cfe8","sha256":"088611a1cc9fc6930a02a81b177dda0d43d41bcd0085015c19c1706c72f8f462","sha512":"60f7ec44153036c1f6494a93230c74cb455f090a8aa3d659538f19a3eb8b1489994d09b4d8c2505f7ed472de55d44c9040d80fd8c972fe0263817c75662f87e1","ssdeep":"24576:ISyIjMkQSYSIV7RGvN6QNVfJ0RXiiUEVfRSQBcpD63O1:IrIjM3SYSIhRGvN6QNVfJ0RXiiUyAQ+h","tlshash":"ec459f4c7792b19406e3829174e75502f2746d85e58680b4fdecc9fe21e8e8de2b7b38","first_seen":"2026-10-09T16:08:26.868776Z","last_seen":"2026-10-09T17:08:51.990944Z","times_seen":5,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Frame%204-qWkfDJjf.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.570Z","timestamp":1791565691570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Frame%204-qWkfDJjf.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-20dd\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFxTm7TRixkcH86n%2BOPjdcdCtEmQwg1w86iYNgsgziQ4H4QM9Qs9aWk1PqXfdTkfh2EsmktDUxf3QA8VJ82os%2BgoyKrERB0185p8DWRtd00NpApYv6I281N577h2dJfx\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab756a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8413,"size_decoded":9223,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"264df1bab5915017aa44a0e0b8743667","sha1":"bd97c7bd5c839e29446cded395805af0a08f9b8e","sha256":"841a45a62324a18518fb30f38f1c097827d6b9585c35dbd9856f94755bb15e0e","sha512":"483aa21467a4ae27ed9f2ac5a7b705e8483c6926a2c43ce8d116943faab02f1ed9943fbbb72926edd5d1a32ecca8ef00acee2e7b4c37714730ef88ebbe53af2d","ssdeep":"192:caJgBbRcbRgI/EZ+ZsoUSRZnVHdtda+gv6ah2:xgBbwxcKVdNdtb66I2","tlshash":"7802af77d5c6848c122ce2a7eb287950f21448011175d26cf6d81ed7e1bb93be937b0b","first_seen":"2024-12-26T23:29:40.054476Z","last_seen":"2026-10-09T17:11:00.657215Z","times_seen":167,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_6-BrdJwosH.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.577Z","timestamp":1791565691577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_6-BrdJwosH.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-26d4\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxyGip33ab8Nms9v75KhUS2g2oEK5NQhCEE8v%2FgTm%2BpU8Je%2BmxCgPdCmpvF5lx34Cq%2FiwlLd445ocAEYsm%2B8Pjncw7p3A5Aq6PaUgsxbYkh5ks6Ry69uCZ4h2JRW8iGY\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9940,"size_decoded":10756,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"f4e6adb95ea32bce12b23d17e5c0bead","sha1":"00ced7819afc7267f587e68ad7dfe84c7eec7261","sha256":"b13acac1bd74d72c21facafcd3dbf6bb44dbb271b23a0df6a228eb28b7e337c9","sha512":"30f9dc0634ab618910888f5b34671d727e6e853facbee428b3e0177cc0dc3defe2f26dbaf96997e6bc351c241335da5f320d8f97f034269987cb2e99b4a1c838","ssdeep":"192:fS71Xz65HFwfkYKFafIGQA0GIQuuUa3b5hevzXLOU/8Ea4FM5OCZ:KNzUHFwlyafIGQAx7Ua3b5hevzX0EXaJ","tlshash":"2922a04ab28e49fdfc8a605c80b78d78764c2831f333e6110480f6a653941f756f3217","first_seen":"2024-12-26T23:29:40.06096Z","last_seen":"2026-10-09T17:11:00.62561Z","times_seen":164,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/remixicon-CZw4FkzQ.woff2?t=1769685282643","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.562Z","timestamp":1791565691562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/remixicon-CZw4FkzQ.woff2?t=1769685282643 HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/assets/main-D96emkko.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\netag: \"6ac5385a-2e320\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3018\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZumOD%2BqB9STRUopl5B%2FZtIUkvI%2FN13X7u0JOT%2F2PcQBNcworbJXNIqMXq0Vxl%2FyCGGs5mMx60u6Cm7Bk5iqWpnfLLHrx1X39rqFBCPXSxaEiyFwKUxXbCJ0Ask%2BUqBhV\"}]}\r\ncf-ray: a47efc643aa456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 189216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189216,"size_decoded":189966,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 189216, version 1.0","md5":"8f6721754cff9caf995e7a594e29a271","sha1":"d1317cdea21ee7424586c85def817ed8a693453e","sha256":"e92dc38bfb1d15dbb9d9ca9e645754f68e7c5b224e33c45a17048bd0cf2407a6","sha512":"dc2a6fd6172b7cf2b0db9d0a53e2bd6af6b895da494c4fa65f387ff75a42d0f5b27c063f73c90a4ddeb55f76163e0a0edf9923557111b3d666e64275171aa250","ssdeep":"3072:sfregdC66/TmYghUr9FQanZkx7eTpbDDesGryFBxLWz3s:o7dC7TmWrMoeQTNP","tlshash":"5f0423725207247a369b05c734b0afa9ee8670cd82edd1a82d77d53ba1b3e2d5f07520","first_seen":"2026-02-01T14:44:13.341674Z","last_seen":"2026-10-09T17:11:00.644087Z","times_seen":248,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_12-C1QilreQ.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.582Z","timestamp":1791565691582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_12-C1QilreQ.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1298\"\r\nexpires: Sun, 08 Nov 2026 16:17:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B3cr8Uez57K36PJ2%2BStW7yt5LQcLbH9xJakk5B3zBM7zi3HAmx%2Fj8YQo5FG8rjAz2luE%2FZMCISFQ1IKqzBlRjlpER%2BI%2B9BLgzDShtMUG3Acyf%2F0R2EaUQrTglF0Asg%2F\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac656a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4760,"size_decoded":4862,"mime_type":"image/png","magic":"PNG image data, 300 x 87, 8-bit colormap, non-interlaced","md5":"96005bed58ee3407bddafa6c12707734","sha1":"c3220fb9384f290f2487bcca0acf38cb9dd90964","sha256":"53a0ff4b5ede57448da0e58c94ade19ef52a993015f4d06c556e5e1731c7edb8","sha512":"94d4d49ffaff9847318b6bdf7661dcabc080eee8fa4a033cb9fe7bccc2fa2235992f8cd3f42cb80e1e9d3520623d698183277577a7148739dbd2a3fd864e3eba","ssdeep":"96:z+5+dVokXu1S0zHAtRB73Hne4QDCvx65yOvOBkYK1+iL:z+5m+EoKNHne36x4yOkkJPL","tlshash":"bea16d969d8e8028e8e238b872d5f4edcd340134609bf20ab375ecb60cb50925d2fe42","first_seen":"2025-09-04T00:18:50.316456Z","last_seen":"2026-10-09T17:11:00.632516Z","times_seen":147,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/platform/Ellevesta.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.249Z","timestamp":1791565691249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /platform/Ellevesta.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: text/html\r\nserver-timing: cfExtPri\r\netag: \"69a31367-3\"\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpw%2FIzZ9bJAN%2FTtzTxxG98qeNjzyoPrf%2BTMoQ3ivGz2qQDaQax4gLaUBdv%2B38RRFXkO1DQOu%2FbLriJRQQL0GNfNctjpKKSa%2Bal8Kpk8Qj6yk%2BTjTO9vgS89E5ys1hbD2\"}]}\r\ncf-ray: a47efc624a3056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":629,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"4f4adcbf8c6f66dcfc8a3282ac2bf10a","sha1":"c35a9fc52bb556c79f8fa540df587a2bf465b940","sha256":"6b3c238ebcf1f3c07cf0e556faa82c6b8fe96840ff4b6b7e9962a2d855843a0b","sha512":"0d15d65c1a988dfc8cc58f515a9bb56cbaf1ff5cb0a5554700bc9af20a26c0470a83c8eb46e16175154a6bcaad7e280bbfd837a768f9f094da770b7bd3849f88","ssdeep":"","tlshash":"c72000000000000000000000000000000000c0000000000000000000c0000000000000","first_seen":"2023-03-14T15:28:33Z","last_seen":"2026-10-09T17:08:51.998802Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.elleves138ta.com/ws/a2d7d6d6-ff51-4b27-8fd1-11fe6d28cca0","fqdn":"webapi.elleves138ta.com","domain":"elleves138ta.com","tld":"com"},"ip":{"addr":"104.21.90.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.535Z","timestamp":1791565691535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"elleves138ta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 19:45:42 GMT","end":"Sun, 22 Nov 2026 19:45:41 GMT"},"fingerprint":{"sha1":"9D:54:27:B3:E9:39:52:11:7C:F3:89:89:72:5D:64:62:40:71:AC:97","sha256":"17:51:5C:68:4B:10:8E:F4:49:C0:03:41:17:26:80:2B:C8:38:D8:C3:FC:38:9A:9E:49:0F:B4:6A:C7:1B:CC:9E"}}},"request":{"raw":"GET /ws/a2d7d6d6-ff51-4b27-8fd1-11fe6d28cca0 HTTP/1.1\r\nHost: webapi.elleves138ta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ellevesta.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ExCskrtWQbONHMDYqXQzAg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 09 Oct 2026 17:08:12 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ellevesta.top\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: wuGJKeEnJVwDNHcHMD7PEYmryKU=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cvvdJVoM%2F4qiy%2FWMdb1hWk0kNmwZmy88BK4sMOX%2BC1D9pR6bE146stJNwJhZGLB0YT2URG5p6x82ZHKejAQKfiQTt2HCrlIkLGlihd2y8YsDIVAQAN%2FIsTINx377Hc5I0Dq%2BVqeHu6RqQ%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a47efc655efc5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":894,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":181,"connect":80,"send":0,"wait":581,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_8-8hE399Ma.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.580Z","timestamp":1791565691580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_8-8hE399Ma.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1463\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aB2YD93t26UMpuap4WafuP6UDQmb4ksNlQrKWIazEIIdKyoCZ%2FoN9jpbCgOfrDt5C5gN%2BdlAi0eCqFKypyU3NTv9xO5fN%2Fp2erRgpnXGL4%2F7iwDQ9R5HliRhVvnAzMRt\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645ac456a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5219,"size_decoded":4768,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"6211d145652aa5683717095a2b8f3cb9","sha1":"e723a1eb0b976b950c7918554ca3e03b82517b2a","sha256":"4ffbb5844e062f2f9fc2a8d92fbb4e20eefda839538163f19cad9127a9882b5a","sha512":"c586421b8bab3f03423e22a99e4733fc6de0e8947fe5544cadd46d6f8cee89d2906504e34ed9a133a4e349be47d931ad936609fa19daa7e00b910b5d28d9a835","ssdeep":"96:rknmWq2iSs+x1Nfa9cNG0KGY+xqHZTHOHU+xLYTiuL+R83xrIN1KEVXDFQLsFnu8:rknK+3Xq+g5Tu0+ZuybZVXDFFtfQke9Q","tlshash":"b3b12a0abf406c114a9d66c067ee610767775bc086a4a560fce6cd175c306fdcd8e9c6","first_seen":"2024-12-26T23:29:40.093755Z","last_seen":"2026-10-09T17:11:00.641121Z","times_seen":167,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0382d950dcd4946f8a3e22647c0c2a3f9.jpg","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.361Z","timestamp":1791565692361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0382d950dcd4946f8a3e22647c0c2a3f9.jpg HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 36717\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DACF6C539397B14D7\r\nAccept-Ranges: bytes\r\nETag: \"DBF9392332DCA15373D6F8AF4DFD3637\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8423756583361112407\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2/k5IzLcoVNz1vivTf02Nw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":36717,"size_decoded":37292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 500x592, components 3","md5":"dbf9392332dca15373d6f8af4dfd3637","sha1":"8df54f344277099f7810fcf910745a68a90d0f6b","sha256":"35c6018a631329ca58da20ce65e3e5d771aaca3c0f28fa9fd5b6d94bec7eb7bc","sha512":"c7bf465f30db654dbc0687858e1dbf238803e539d0ade1037e1c2c56063f176b5474d8e8c2e9c6d6b973694429b94a09b13b19613d82a862e662bbbb5bcc7a84","ssdeep":"768:7XseaitVztVsnNcHPjM3nlB2HAzfjeb1WvZIUxmXJg6qCHaeX0zMz:QeaGSmHPj+nlggfib1wI2caxdBzMz","tlshash":"fdf2e14bb3669ec7e01d9d7818d128f5b0e33a51455d76910bb8b878443b2a2aa07fc8","first_seen":"2026-10-09T16:08:26.857587Z","last_seen":"2026-10-09T17:08:52.001487Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":271,"send":0,"wait":280,"receive":19,"ssl":816},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/player-girl-b0k2Fntv.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.981Z","timestamp":1791565691981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/player-girl-b0k2Fntv.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-2a30f\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48JgYgfuubTRWfgKE9gsYY9jrNZg%2FFLP%2B%2Bbtw%2BEYTiRHYPig97FCUoMhZRbD7hRaR3hRpXw5rXLn0fS%2FZD4phyfmHXP%2BtkcUHCvY%2BPaMnBvyzIrKNEPdm6fRQJl7grTm\"}]}\r\npriority: u=5,i\r\ncf-ray: a47efc66db4856a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172815,"size_decoded":173666,"mime_type":"image/png","magic":"PNG image data, 851 x 984, 8-bit colormap, non-interlaced","md5":"c9aaf71bfdfe1c324eb4dbc50fa81a5b","sha1":"72be6e6b6d70b74e76eb928da68aeab95d4f3910","sha256":"40046f2ef357ac7de248467cb4df9d6d52b4ec8eb991b2def1c7781ee628efe1","sha512":"e2f3929794066bf49e618646845aadae51233ac9fe2e2a34547b08c3a38e9add6bff0dd9726bb26b3e13545fe3f8f19f700d6378fcbe83cc2b2999118777799c","ssdeep":"3072:kwJtJcOnA3KQ9PIeqecp3IRtyzHUenSw/HDFwVIM8tEJku:fvcOAjFqeceRIzdLFaIM8tEf","tlshash":"caf31253c3e8727a4824ebc7b81f01ff19d9ab7529692d0428ab6850ec0d0be6d5df0d","first_seen":"2025-12-18T00:45:38.414103Z","last_seen":"2026-10-09T17:11:00.638245Z","times_seen":28,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com/echo2.0c02aca10ce6e4db5bb49a0392e61faf5.webp","fqdn":"java-vue-bucket.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.174","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:12.359Z","timestamp":1791565692359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c02aca10ce6e4db5bb49a0392e61faf5.webp HTTP/1.1\r\nHost: java-vue-bucket.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 09 Oct 2026 17:08:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 495248\r\nConnection: keep-alive\r\nx-oss-request-id: 6AC91F7DC390C331375BB18A\r\nAccept-Ranges: bytes\r\nETag: \"8B2BC567674CD90A47E83B28F9C8D03D\"\r\nLast-Modified: Thu, 05 Mar 2026 01:48:28 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8328983667694156453\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: iyvFZ2dM2QpH6Dso+cjQPQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":495248,"size_decoded":495824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b2bc567674cd90a47e83b28f9c8d03d","sha1":"8f3a78ce745b934800c892d1893e73dca0dae9c0","sha256":"88e0fd36b5fd7a10998bb6b686b9af11e7b1899407e8ce5fbfa83f6cab6c2311","sha512":"dc5c1af8eade2e3a6ef5987748e843e136aec6b9f9a8564d449d1efd2cdcc028829a5d7194641ddbcb453fdcfa9b83b02d24f43ed50e79b28f09d7bc7733d155","ssdeep":"12288:wSoI9+Ioo7M9T/4oIoqbZF50SeStBHV3cQbqD0ZETjMxp5gR:wSWIoB4rNbZ4g/3cPZMxIR","tlshash":"29b423e60ff9b281c5c4d331fff74a0dea7aef418935210598d59b0a0994989ad83f63","first_seen":"2026-10-09T16:08:26.826252Z","last_seen":"2026-10-09T17:08:52.003632Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2165,"timings":{"blocked":-1,"dns":0,"connect":254,"send":0,"wait":263,"receive":877,"ssl":771},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Frame%202-c2RTuPRh.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.569Z","timestamp":1791565691569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Frame%202-c2RTuPRh.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-1904\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lrs9MB%2BFoDiS25dEiMR7jjnVrRvtqx64lNsmGSvOZ%2B2OTwm9DG3g52l8JWqTp17VqX%2FW8ywSS4x0gqqn9anHv0mvPrMuNH%2B0m7Fs8b%2BPkeRowCta3PJ3gP6Zb5suD1nd\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6404,"size_decoded":7164,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c5f6ce860b906f355bed0f55e2ae2a88","sha1":"044d4a88650ebbeb71b5ba01dae0993e64ea257d","sha256":"2e5a4148f2f24b69f934319ce6e397de373ccdb3744307d44a9ef747973b945b","sha512":"98b22901d2a1829c6d1953b0a3ff3306f939e2966c166f9971a3a29a95c27c844627c3edeabc4dc7148aeb0a47b8e685e7bcc9abf756f179e5dfe0f563a95fde","ssdeep":"192:MlfDJ/atKb4jNpdL9w9mjidVbFTC7E+XNS2:QM04jNXL9w9vdV6X02","tlshash":"8ed19ef7971026a7fa9855c615356cbacfd4a6034bc72608013a76053dd6728ff0ba86","first_seen":"2024-12-26T23:29:39.991003Z","last_seen":"2026-10-09T17:11:00.639947Z","times_seen":167,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Frame%208-QBBarmw8.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.572Z","timestamp":1791565691572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Frame%208-QBBarmw8.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-117e\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8s42UrclWgK6kh3GojOuINdJIYeWKZ8SpSGIZbWKyVFWBjmJwH26AK9DhnomGhYe394hobrUDh7JuVDUuxNf%2F0k7jLTv7Aoc4ocK2tHUrCONzxWSYwgiEZhsrDu96xS\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644abb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":5275,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"e7cfd72af14d344bb50ac6a368b99779","sha1":"6d04bc54730a8609351237bafbb0bfc98a07e131","sha256":"180400a26cb69fe17d05af323409d39541eaa734be725363518ebdfb431b8164","sha512":"f981285edc92363ec2c515204f81363c61eb8c8b8bee5cae16b48d9a90866f64e7313813ba306a5d0a9d93b45dd9d7f62341667922f5a4b6d52202ed3573a4e4","ssdeep":"96:fSpM9j52pIOAY8e34ByvkJ8Z0LasASip3bJBK44pv6mb2:fSm94pIOAYgE9S744pO","tlshash":"27917d9dc1239d25cde6caeeafa46ccd7c8d7f009d25726880a5247526040ec4b3e68b","first_seen":"2024-12-26T23:29:40.08069Z","last_seen":"2026-10-09T17:11:00.655795Z","times_seen":167,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:08:09.674Z","timestamp":1791565689674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:08:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mY1su4cGOVcMR%2BcEHderSmAagL8PsSkqijoKkOjOG8NmXekJVFwoS8Mbcl%2BFI41inMh3FE4F8XG5fQFOZAeY9ywZSBhgwidoPc5T%2BL4HspoJq4L0DeNuxxLs7%2F48IoSv\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a47efc589f22b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2170,"size_decoded":1580,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"df041aca79b030ad81f0ce7fbdc4d651","sha1":"3ef5416ce655d354e2c6c79ad002bc690946ed5f","sha256":"de193973143cbfe886dfbbbbe036f9effa2ee862d12120a8eba8e776bdb0d2b5","sha512":"12d9a935d05601a76a061a115628cc194efa667411e25ec93073786bf065409f709f8b9b57fc10932151b85577ec4e1bc9f894765cb663b286a57f06a5848589","ssdeep":"","tlshash":"55412f07a6b0981912740229bdd9f0188a3681d7d31a8a5c719d21bdcfd1be58af32f6","first_seen":"2026-10-09T16:08:26.906963Z","last_seen":"2026-10-09T17:08:52.00664Z","times_seen":9,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":615,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/vendor-BHC4R3kY.js","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:10.522Z","timestamp":1791565690522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/vendor-BHC4R3kY.js HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-19e13\"\r\nexpires: Sat, 10 Oct 2026 04:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40%2Fd0xPsR1FsawtyakzQnzHWbD9TekONfotc83lDfc9%2BY2aurrBnIHtcBxdnZAMwGF2opgIhuoJLA3%2BPb7j6bhuX9Q1lM5AcMuNvSDef7yuNmaHcdP2%2FTzlThVVX5GFh\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47efc5db94f56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106003,"size_decoded":41315,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33706)","md5":"1244bd2fca9e11aa1db620c4f06fecf6","sha1":"11d6bc815a0b217af8e9b323f3d546b3c43d0606","sha256":"d5122e27ef03b1d454d1703483fc51f1054e9046ee778911897aee6b509c35d9","sha512":"75e7657675d22b1ddd2fbb0d22f29e93083d7bd1a79eb116c72c5c9786cac5f7e2c111e842aae7dacd775f8a0a721dce9fdf2517ba711d9cc64e66c40c9cea07","ssdeep":"1536:nyp4FfPoBgIA+vstBjefSVf0vzCcGiVe5KQ2aZlluO1XqwlcsptOVp:yCqBgIGjeqVf0vzNREKQzZXuXsrSp","tlshash":"06a308e93282b06253ea09e7007b4015f33a1959380e98d4f16daddb3d7744a91fbe7e","first_seen":"2026-06-23T17:10:34.721267Z","last_seen":"2026-10-09T17:11:00.62767Z","times_seen":16,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/tether-bep20-Do_RZ-CE.svg","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.566Z","timestamp":1791565691566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/tether-bep20-Do_RZ-CE.svg HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-42e0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYjRbHpaNlW0vPzwj%2BTcZNKla2AycAmAUHtg07uoo9NfVZbt9%2FIaw7iFUKV%2FX8GKhkx0AWqsXbh%2FyXsGGmHTUOLS%2BJxZISvcVRa5%2Fakx14pkrikU%2Feysh95SF4CCZXNS\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab056a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17120,"size_decoded":8124,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09878eaf15fe1cddec76d5d506b20a8f","sha1":"f5a9f2f72c813624315cc0725441f237229cbfbd","sha256":"faafe4b1c558a3aa28117a2ceb955559150c24df1c8debe06b6cf404194d644c","sha512":"60da5902c4413eddc29b1f8e6bfd688020b035f6d2983169b1e848731f11b4893cc392e25909ef5893b095df5d17e418cddf277a010d0d74e189dc2d96a97c6d","ssdeep":"384:kW56SMp+GrQEXuQdN+XnVS8GJVZvshYdMYhPO:kIMp+8QGXD+XA8uXMQO","tlshash":"927285c83779d3fcf401f9dedb1530742d0e68dba6a244b8c7721d09a85a4dc9e958e2","first_seen":"2026-03-06T09:32:29.633841Z","last_seen":"2026-10-09T17:11:00.653078Z","times_seen":20,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Frame%207-DhyADEO1.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.571Z","timestamp":1791565691571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Frame%207-DhyADEO1.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-11df\"\r\nexpires: Sun, 08 Nov 2026 16:17:52 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RUx0MdYv4MX2hChF%2BZRgpSGGBFun%2BZkgIO%2BkX3k%2FxITHm0rZuGhRoZAZhlmO%2BRTdBGNw6bXzim9vsS8%2FTZt1Ha1%2BMuzGKWQmjnmYmEi80XVqhFSPTnkxg6KKVGeMLxx\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc644ab956a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4575,"size_decoded":5369,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"c32c604441f656c4eda637db0ce64fc3","sha1":"a936a84c35f34bec6296ccea1ca277ed492b3f37","sha256":"c1011c258b378ecd5b229f60bb4de768c1c1644d5e2acdca24076192b771d0f5","sha512":"552ee2eaef75d4aa9bc1cd49166d4aa8253dbe56488a325c4d670cc41f4dc88f424a2bc6ef42e190dbe651c90a9e0cdcc463fd6b6e778f17ec8a077ceeac0c75","ssdeep":"96:fSZLP23oemB7OTWDyKhsF40UKFEcHp4u9uXBIu++6at42k09B:fSJhxYEXsFLUKicKNR9++R4LE","tlshash":"09916c15efb1b3227f10ce36866a5811a71609fba54d20ae958d586c66143b37caf04b","first_seen":"2024-12-26T23:29:40.059828Z","last_seen":"2026-10-09T17:11:00.6451Z","times_seen":176,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/Low_4-CZsCHZTt.png","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:11.575Z","timestamp":1791565691575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/Low_4-CZsCHZTt.png HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-22f4\"\r\nexpires: Sun, 08 Nov 2026 16:17:53 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3018\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8U9G3sT%2BwUK0ahzDpFc8RQjyPglc9w5ANpsF%2Bn8CxbJpYe51kdzGddLyWPSj3YOYOAbcsuYEfZcoywEyp2nuCVMeu2NHJ%2BGkXi0KVMo6gWFBzajwNV8mQ%2Bo9rL95RQdX\"}]}\r\npriority: u=4,i\r\ncf-ray: a47efc645abf56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8948,"size_decoded":8573,"mime_type":"image/png","magic":"PNG image data, 216 x 80, 8-bit/color RGBA, non-interlaced","md5":"5b3ee8976381978db00a5d83a5e8bb1d","sha1":"e4c03afd678536b2659f6115ce67e49bc6127f95","sha256":"d16314aa812455f4867fc9124af62e75ac962d48bebf068fb343e5b49c1f87c5","sha512":"2c4884ab65d9d3c62bd64ff25bd2ee709b6405f07e941e3c68ab28e82ff8fd91ba7a1c5a0b189599eda448e0a2f39b8b43a80878628b4afd95f9428e0e8e977c","ssdeep":"192:rknSAq+3Xq+g5TelZa+hXbDROtAir4cIPgi1QghQPkGadurVxKq:AnSAf3XfgBelZPN+DIYEQghOvrKq","tlshash":"40028f4599486e4165d6b294aceda00353a28fc0c782d8747cedcc291cf0bbfce86ad3","first_seen":"2024-12-26T23:29:40.048598Z","last_seen":"2026-10-09T17:11:00.634729Z","times_seen":165,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ellevesta.top/assets/main-D96emkko.css","fqdn":"ellevesta.top","domain":"ellevesta.top","tld":"top"},"ip":{"addr":"172.67.223.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ellevesta.top/","date":"2026-10-09T17:08:10.525Z","timestamp":1791565690525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellevesta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 12:14:21 GMT","end":"Thu, 26 Nov 2026 13:14:09 GMT"},"fingerprint":{"sha1":"A6:2F:77:03:72:C5:D5:9C:58:6C:CE:53:3A:01:CE:F7:24:3C:4A:24","sha256":"FB:69:EF:67:77:8A:5A:82:DA:C5:8F:74:76:1C:A7:2D:CB:AD:53:04:8C:FD:92:81:30:2D:F5:61:D9:30:60:24"}}},"request":{"raw":"GET /assets/main-D96emkko.css HTTP/1.1\r\nHost: ellevesta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ellevesta.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 17:08:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 06 Oct 2026 18:05:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5385a-55678\"\r\nexpires: Sat, 10 Oct 2026 04:17:50 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3020\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5ApyXOjCyLylkKOefJny4OkBsz1IWdoB92rUESMmOvo2OJChwjF%2FKHzBuloa9vhTr4w9MXfVdkk%2FQqXY7dJ1M3hSIgFkY7%2BTlJcUbNzj0IHKgtfaJrSOoX%2F1Yn5tOF9\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47efc5dc95156a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349816,"size_decoded":59596,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63290), with no line terminators","md5":"55b9c0597d130b3697b421b4af6b1daf","sha1":"544c406b9e4cb62535dc7f933fdf059ff8167e0f","sha256":"c165c04be5f35f8c4a0b3c5ff55033c8a3f8790a25c28488b543228aa77dbc68","sha512":"31a95a9352a3c47568c30e147d6e478bf1b92ea3305f915bdba1ac7b818bd28fb455541e8e90440ac63a340b22dc4d0ff204d0460574dee7040488d306a559b7","ssdeep":"6144:eNko+Qkq7sItOa8onFur+0GyGS8/zdhNaeyC6fj7MVnKhXSgGCXk0ANX4pEm1eRR:eNkx9IJFX","tlshash":"7e74fcbce24c00e93b33d8a6c3b4778d6139f6b2c9951d95f94b901cafc33a506d5a68","first_seen":"2026-10-09T16:05:08.410302Z","last_seen":"2026-10-09T17:11:00.630829Z","times_seen":14,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}