{"report_id":"40e32a05-c766-41e2-be30-8978a0f83ec1","version":6,"status":"done","tags":[],"date":"2026-04-13T22:03:57Z","url":{"schema":"http","addr":"ixueker.com/track/click2/eNpdT9FqhDAQ_JdQ32LMbpKNvrVQ-hOliKdRc-clxyXSg9J_r9aHQmFh2JmBmXlXoLVpOGOcgbUEUkqyWJsWpK4NtYfekjVWidSXIMumVFA2tvThFNcwyKfchSE-h-ki-ijON8YlZ3POt1Sol6pafJgeXsRx9L0TQGpzXauUu-z7ds7XpUp-Cl1e707sb6He_FCoV0JtiXSDcgMFNUGBlOb4uWm_EWO3JLf3liSsEaiFtuyP3s4MZBV2GgixBzjVDrVzipxDokHC4fKP1V3cfa_F-Nc3P5ZzjZz9X_bxA8iZVK8=.html","fqdn":"ixueker.com","domain":"ixueker.com","tld":"com"},"ip":{"addr":"106.75.109.68","port":0,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"title":"网易灵犀办公-定制签名","dom":{"size":10740,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bb17df3b492ca87fdf6a60daebda4102","sha1":"3c862ff744bcab44663c0e01f8ea78153655bf5d","sha256":"dd7aa1257755c820510a83f0b35cf66f0a557b3d02784b29efaf15b029fa4a59","sha512":"e0c903115de9e4fa751ff6a7bf2dbc7d762a4eab1b46e194e1ca6b64d65749a82ba91cbae3aa771a5c3135b9ec8ef297bf4e9758e9adb89dbd57cf84add2ca3c","ssdeep":"192:qPSrK3NZaK/yJkKvDtLWwSCfVKOeZDSsv/obDVyIJQH:S3Ns6KJyMPU","tlshash":"df22526a49f30016b657f03c6bbba2493771d1078646cd487f9ca2ac8fc5da4cca77a4","dom_hash":"domhashfe938be68204ad1da4834b3c7e4aba20","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ixueker.com/track/click2/eNpdT9FqhDAQ_JdQ32LMbpKNvrVQ-hOliKdRc-clxyXSg9J_r9aHQmFh2JmBmXlXoLVpOGOcgbUEUkqyWJsWpK4NtYfekjVWidSXIMumVFA2tvThFNcwyKfchSE-h-ki-ijON8YlZ3POt1Sol6pafJgeXsRx9L0TQGpzXauUu-z7ds7XpUp-Cl1e707sb6He_FCoV0JtiXSDcgMFNUGBlOb4uWm_EWO3JLf3liSsEaiFtuyP3s4MZBV2GgixBzjVDrVzipxDokHC4fKP1V3cfa_F-Nc3P5ZzjZz9X_bxA8iZVK8=.html","fqdn":"ixueker.com","domain":"ixueker.com","tld":"com"},"ip":{"addr":"106.75.109.68","port":0,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T22:03:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-13T22:03:38Z","timestamp":1776117818,"ip_dst":{"addr":"Client IP","port":53456,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"106.75.109.68","port":80,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"severity":"medium","alert":"ET INFO Unconfigured nginx Access","source":"{\"timestamp\":\"2026-04-13T22:03:38.270119+0000\",\"flow_id\":2185586051449853,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"106.75.109.68\",\"src_port\":80,\"dest_ip\":\"172.18.0.4\",\"dest_port\":53456,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023668,\"rev\":4,\"signature\":\"ET INFO Unconfigured nginx Access\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2016_12_19\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"ixueker.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":394},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":612,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":5,\"bytes_toserver\":566,\"bytes_toclient\":891,\"start\":\"2026-04-13T22:03:37.590845+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"lingxi.office.163.com","ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"1997-09-15","domain_rank":958769,"first_seen":"2024-10-16T10:50:09.915587Z","last_seen":"2025-05-21T23:15:21.192811Z","alert_count":0,"request_count":7,"received_data":517203,"sent_data":3653,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cowork-storage-public-cdn.lx.netease.com","ip":{"addr":"163.181.58.175","port":443,"asn":0,"as":"","country":"Malaysia","country_code":"MY"},"domain_registered":"1998-04-09","domain_rank":707205,"first_seen":"2022-06-15T00:43:56Z","last_seen":"2026-04-08T18:48:10.428251Z","alert_count":0,"request_count":1,"received_data":5875,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"ixueker.com","ip":{"addr":"106.75.109.68","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"domain_registered":"2016-06-29","domain_rank":0,"first_seen":"2026-02-15T00:37:06.304867Z","last_seen":"2026-02-15T00:37:06.304868Z","alert_count":0,"request_count":1,"received_data":10503,"sent_data":802,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/assets/DATracker_Init.js?v=1.21.1","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1352c72f3c5649801e6dcd017e7a5309","sha1":"12e88fe41662ff6d4e5985de85ea4af1fff0c51e","sha256":"154e095d8706601f640392b1f4bc8f38ed83d513d6fbee7de9602cb8d8622172","sha512":"ab58d8a34617bc95064cd1312e29029b4461d437ad945b1c3ca6129ce2da67acc0910c86e348f8bb7bc8be472f822337ea23da354fefcf85084bc64a0b99739f","ssdeep":"","tlshash":"0071a01f3dea60529623743d797ff214332a9043648ec918fe8dd385af8496e4a55acc","size":3477,"data":"","first_seen":"2026-04-13T22:04:03.242077Z","last_seen":"2026-04-13T22:04:03.242077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"1afe379251bc8a555de55f81b4be34ea","sha1":"1a30ba38e9bbd6c2c24e6c7ed46310ea5a581370","sha256":"a9eb956a2dc6b71dec0dbf197b5f963b298d08364d78c7d2fdaa3f8668a17493","sha512":"6053fad083c5ae98b323ba5cfc400b3b87929b96185c0c5caf2b56d537614a4b7f4f235b097c3e005bde7c52cdd729ceb3680734a4c9e2e7273db97e7100450e","ssdeep":"96:jGDtlRBY1ylTSCOca8KmBelzDHSsv/oPDDVyIJ6Lys0L:CDtLWwSCfVKOeZDSsv/obDVyIJQM","tlshash":"31b12f2a15f300248623b03e5abf52583a71d1032945de02bf4c92ac5fe9d3999bbbe4","size":5585,"data":"","first_seen":"2026-04-13T22:04:03.24528Z","last_seen":"2026-04-13T22:04:03.24528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/assets/bg.jpg","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:38.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /static_html/assets/bg.jpg HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 485139\r\nlast-modified: Thu, 02 Apr 2026 10:35:10 GMT\r\naccept-ranges: bytes\r\nx-envoy-upstream-service-time: 0\r\nlingxi-traceid: 467dafe54adab7b3800a841975a92f1c_n^750873600000^0\r\ncache-control: max-age=36000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":485139,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e489b9d6d6e171bd3c057c5f73acf476","sha1":"c48bd5b8f8c0927d50432c28216f090246f7f5cc","sha256":"9fca17fb998bf3fc1710d034c25297e1fc5b9bd0c0a367f1e61da0fa83966f23","sha512":"7f9d941afdc4e52603200ccb379c5b108d79d9cb6a73bbf4dc7617f4e161b8b8e356904c768757e1ceff1897495b413fcf3c6a5adca42133dc6af77debfa8575","ssdeep":"12288:pzS3Bac2vCdhV0sYY16wKJaPiDqLdEvggM:p2Bac2InNXeaKDxYgM","tlshash":"33a41232fbd7c7519b9b5a1c907e7cb71b4a62c46edc1a6f42a30c142649f358893a3c","first_seen":"2026-04-13T22:04:03.234254Z","last_seen":"2026-04-13T22:04:03.234254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":1545,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/favicon.ico","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:39.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:39 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 0\r\nlingxi-traceid: 107c5ee7a5da298a2d7c66670193a3e8_n^750873600000^0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"70461da8b94c6ca5d2fda3260c5a8c3b","sha1":"994bc667720c21257500e29038c1a5f61e25da1e","sha256":"f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee","sha512":"ee993842123fa9b1905fe6b111aca70c1ea3e7f4fefeff889cb803887c6ccdccbc9a8e1025cc98528b7790e973436ac650c733421a168d0cd0dba22141b43179","ssdeep":"","tlshash":"aac08c6d6513ac8dca53223827c3a180c1a6832baaaa451105809143b0cb2998ac239a","first_seen":"2023-03-07T16:03:30Z","last_seen":"2026-04-20T08:00:17.844515Z","times_seen":25570,"resource_available":true,"data":null}},"time_used":1227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/personal-signature/api/pub/mail/sign/get?signName=624766492076631861","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:40.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /personal-signature/api/pub/mail/sign/get?signName=624766492076631861 HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: zh-CN,zh;q=0.9,en;q=0.8\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\ncache-control: no-cache\r\npragma: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:41 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-response-gateway: sirius\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-envoy-upstream-service-time: 767\r\nlingxi-traceid: 4ed7c3dec6b39ed583a1a54fbc344d1f_n^750873600000^0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5388,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba624f5147aa679c8f4bae4b3f83aed5","sha1":"2776bd3a30afe8bdce26931a0b6063d569bd5912","sha256":"efd95c389b7e42c60bd968fb5e55cf32da067cb331282c262dfb6cf7f1ec098f","sha512":"c13a8ec970b0c805a8ddcafeac3e30c5ec9a1d3c3caa2a99d9f7b820449003b07dedac53a79f896a28132628cd73090381bbbcebf86d022135ce6176ce3ed637","ssdeep":"48:Yog3xNaQbVS7C3kcCtpIwTe3VvSCovdGT3tY7T5MXqHQKtpAATW3VvaCovd2r3Vh:H2xLmCU7I+vMDt/WXwevcLVh","tlshash":"92b16334eca0c10c7505c027b832aa5b1b1656e2dbcb95bcb6dc8d58d34f67c6ab2785","first_seen":"2026-04-13T22:04:03.236013Z","last_seen":"2026-04-13T22:04:03.236013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cowork-storage-public-cdn.lx.netease.com/sign/2023/04/13/541f54206d414afbb204da3fa8ae1d97.png","fqdn":"cowork-storage-public-cdn.lx.netease.com","domain":"netease.com","tld":"com"},"ip":{"addr":"163.181.58.175","port":443,"asn":0,"as":"","country":"Malaysia","country_code":"MY"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:41.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lx.netease.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 04 Dec 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:F2:C6:0A:B6:54:13:71:A3:4F:17:CF:47:75:0E:A7:10:09:5C:57","sha256":"B1:32:5C:44:BD:09:A3:29:CC:5A:96:D3:FB:2C:91:49:6F:6E:7C:1E:FF:C6:9C:17:0A:8C:D0:A9:8F:9B:A4:5F"}}},"request":{"raw":"GET /sign/2023/04/13/541f54206d414afbb204da3fa8ae1d97.png HTTP/1.1\r\nHost: cowork-storage-public-cdn.lx.netease.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/octet-stream;charset=UTF-8\r\ncontent-length: 4883\r\ndate: Tue, 07 Apr 2026 16:10:44 GMT\r\nx-nos-request-id: b7f2cee9-d489-4a76-82c3-f5df4c11fcf8\r\nx-nos-requesttype: GetObject\r\nx-nos-object-name: sign%2F2023%2F04%2F13%2F541f54206d414afbb204da3fa8ae1d97.png\r\netag: \"788330afa128d99b737b68794ed32828\"\r\nx-nos-storage-class: STANDARD\r\ncontent-disposition: inline; filename=\"sign%2F2023%2F04%2F13%2F541f54206d414afbb204da3fa8ae1d97.png\"\r\nlast-modified: Thu, 13 Apr 2023 06:18:22 GMT\r\nvia: ens-cache21.l2de3[0,0,200-0,H], ens-cache2.l2de3[1,0], ens-cache6.de13[5,5,200-0,M], ens-cache3.de13[6,0]\r\nage: 539578\r\nali-swift-global-savetime: 1775578244\r\nx-cache: MISS TCP_MISS dirn:-2:-2\r\nx-swift-savetime: Mon, 13 Apr 2026 22:03:42 GMT\r\nx-swift-cachetime: 2052422\r\ncdn-ip: 163.181.58.175\r\ncdn-user-ip: 91.90.42.154\r\ncdn-source: Ali\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9717761178224114952e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":4883,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"788330afa128d99b737b68794ed32828","sha1":"88945964c27904fab697a05e7f5025fa99e11ae0","sha256":"dedd4e1374356e0e29c555313fb1635d9b337705084fd07d646a0865d5375394","sha512":"28ba8b519c68363318a31f1d1532ec4b64153a754fe1fc70a58c66c04681ba2833135ab1d41718684cb3266bbc480389174907df4f78b0031fdaad54ce73984b","ssdeep":"96:U7QMUhwtFt55lXCpfoI75PLn4+JdhKy6ZOGSH/39pc0Vo:y8hwl5PXCloEt4+JbKANLo","tlshash":"1fa17e53e733a6b39647cd114fb5e81a3c6433a1b60a31e523c25a855304d0feea0b58","first_seen":"2026-04-13T22:04:03.237103Z","last_seen":"2026-04-13T22:04:03.237103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":956,"dns":843,"connect":26,"send":0,"wait":32,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T22:03:35.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /static_html/signature.html?id=624766492076631861\u0026show= HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 10:35:10 GMT\r\nx-envoy-upstream-service-time: 1\r\nlingxi-traceid: 68d85a1222630b042851e1591580ca95_n^750873600000^0\r\nreport-to: {\"group\":\"default\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://countly.mail.163.com/stats/csp\"}]}\r\nreporting-endpoints: default=\"https://countly.mail.163.com/stats/csp\"\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' https://*.163.com https://*.netease.com https://*.126.net https://mimg.127.net; style-src 'self' 'unsafe-inline'; img-src * data: blob:; font-src 'self' data: https://*.163.com https://*.netease.com; connect-src 'self' https://*.163.com https://*.netease.com https://*.126.net wss://*.163.com wss://*.netease.com; media-src 'self' blob: https://*.163.com https://*.netease.com; frame-src 'self' blob: https://*.163.com https://*.netease.com; frame-ancestors 'self'; object-src 'none'; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://*.163.com https://*.netease.com; report-uri https://countly.mail.163.com/stats/csp; report-to default\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10255,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"d9ee04cdff254c04aa658be6b1960079","sha1":"64e7165c9fda0cd086f7c28db39f422d72d50802","sha256":"5982c8708b04fe8fb934b8f6209b776535e7bc977611c64502d1452a0631e37a","sha512":"77b8d6f1dca540e6bec3f7fe9bf183a353b6f6bef0effaa5e8ad615b72edab52b9eea03276b98019a1cb1726050e55883601c5717cc4d9b4e31b74310174b4e7","ssdeep":"192:LPSrK3NZaK/yJsDDtLWwSCfVKOeZDSsv/obDVyIJQ1:v3Ns29yMPi","tlshash":"6b22206a4af30016b653b07c6bbb62493770d1079546cd087f9ca29c8fc5da5c8a7ba4","first_seen":"2026-04-13T22:04:03.238134Z","last_seen":"2026-04-13T22:04:03.238134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3943,"timings":{"blocked":1797,"dns":751,"connect":346,"send":0,"wait":350,"receive":0,"ssl":696},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/DATracker.globals.1.6.12.8.js","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:38.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /DATracker.globals.1.6.12.8.js HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nlingxi-traceid: f552268ff79c91e42133f7b1112716b1_n^750873600000^0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"70461da8b94c6ca5d2fda3260c5a8c3b","sha1":"994bc667720c21257500e29038c1a5f61e25da1e","sha256":"f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee","sha512":"ee993842123fa9b1905fe6b111aca70c1ea3e7f4fefeff889cb803887c6ccdccbc9a8e1025cc98528b7790e973436ac650c733421a168d0cd0dba22141b43179","ssdeep":"","tlshash":"aac08c6d6513ac8dca53223827c3a180c1a6832baaaa451105809143b0cb2998ac239a","first_seen":"2023-03-07T16:03:30Z","last_seen":"2026-04-20T08:00:17.844515Z","times_seen":25570,"resource_available":true,"data":null}},"time_used":1027,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1027,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ixueker.com/track/click2/eNpdT9FqhDAQ_JdQ32LMbpKNvrVQ-hOliKdRc-clxyXSg9J_r9aHQmFh2JmBmXlXoLVpOGOcgbUEUkqyWJsWpK4NtYfekjVWidSXIMumVFA2tvThFNcwyKfchSE-h-ki-ijON8YlZ3POt1Sol6pafJgeXsRx9L0TQGpzXauUu-z7ds7XpUp-Cl1e707sb6He_FCoV0JtiXSDcgMFNUGBlOb4uWm_EWO3JLf3liSsEaiFtuyP3s4MZBV2GgixBzjVDrVzipxDokHC4fKP1V3cfa_F-Nc3P5ZzjZz9X_bxA8iZVK8=.html","fqdn":"ixueker.com","domain":"ixueker.com","tld":"com"},"ip":{"addr":"106.75.109.68","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T22:03:34.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ixueker.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Tue, 29 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:84:EE:85:DD:A9:54:7B:0D:18:75:D3:A0:95:A7:DA:1B:89:31:63","sha256":"1A:31:10:7C:93:3A:13:F9:06:EF:A8:DE:26:F5:DF:1C:F5:75:22:EC:A0:4D:68:54:C7:26:F4:2F:AC:35:B9:0A"}}},"request":{"raw":"GET /track/click2/eNpdT9FqhDAQ_JdQ32LMbpKNvrVQ-hOliKdRc-clxyXSg9J_r9aHQmFh2JmBmXlXoLVpOGOcgbUEUkqyWJsWpK4NtYfekjVWidSXIMumVFA2tvThFNcwyKfchSE-h-ki-ijON8YlZ3POt1Sol6pafJgeXsRx9L0TQGpzXauUu-z7ds7XpUp-Cl1e707sb6He_FCoV0JtiXSDcgMFNUGBlOb4uWm_EWO3JLf3liSsEaiFtuyP3s4MZBV2GgixBzjVDrVzipxDokHC4fKP1V3cfa_F-Nc3P5ZzjZz9X_bxA8iZVK8=.html HTTP/1.1\r\nHost: ixueker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 13 Apr 2026 22:03:35 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: close\r\nLocation: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10255,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T09:59:59.281443Z","times_seen":13970278,"resource_available":true,"data":null}},"time_used":2350,"timings":{"blocked":1056,"dns":360,"connect":229,"send":0,"wait":237,"receive":0,"ssl":466},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/assets/DATracker_Init.js?v=1.21.1","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:38.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /static_html/assets/DATracker_Init.js?v=1.21.1 HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:38 GMT\r\ncontent-type: application/x-javascript\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 10:35:10 GMT\r\nx-envoy-upstream-service-time: 0\r\nlingxi-traceid: e0d50f68fe41bb27cbfd10a0f9b692a1_n^750873600000^0\r\ncache-control: max-age=36000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3477,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (763)","md5":"1352c72f3c5649801e6dcd017e7a5309","sha1":"12e88fe41662ff6d4e5985de85ea4af1fff0c51e","sha256":"154e095d8706601f640392b1f4bc8f38ed83d513d6fbee7de9602cb8d8622172","sha512":"ab58d8a34617bc95064cd1312e29029b4461d437ad945b1c3ca6129ce2da67acc0910c86e348f8bb7bc8be472f822337ea23da354fefcf85084bc64a0b99739f","ssdeep":"","tlshash":"0071a01f3dea60529623743d797ff214332a9043648ec918fe8dd385af8496e4a55acc","first_seen":"2026-04-13T22:04:03.242077Z","last_seen":"2026-04-13T22:04:03.242077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lingxi.office.163.com/static_html/assets/default-header.png","fqdn":"lingxi.office.163.com","domain":"163.com","tld":"com"},"ip":{"addr":"103.126.92.253","port":443,"asn":137263,"as":"NETEASE HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=","date":"2026-04-13T22:03:38.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.office.163.com","organization":"杭州网易竹书信息技术有限公司"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Sat, 09 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:E7:7E:B3:2D:98:48:E3:70:6E:5C:2A:06:1C:E2:7F:CA:76:DB:8A","sha256":"34:EF:D7:A4:5B:34:44:5E:91:E2:9D:FA:E3:DD:91:DB:B3:60:7E:65:C7:34:A8:91:92:A6:70:0D:11:0B:4F:44"}}},"request":{"raw":"GET /static_html/assets/default-header.png HTTP/1.1\r\nHost: lingxi.office.163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lingxi.office.163.com/static_html/signature.html?id=624766492076631861\u0026show=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 22:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 9186\r\nlast-modified: Thu, 02 Apr 2026 10:35:10 GMT\r\naccept-ranges: bytes\r\nx-envoy-upstream-service-time: 0\r\nlingxi-traceid: 00816bbc0aa49f07b1a2a430b61be2c4_n^750873600000^0\r\ncache-control: max-age=36000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 320, 8-bit/color RGBA, non-interlaced","md5":"0097ec93e5362083a96c5a6e8cbaff45","sha1":"a6ff8be7defbbf19ed4e08ae081a9f817f3a9a0c","sha256":"618be90980d7fb1316e9d1baf90226dd5028e90d70ab55765be2e14ba1ad2d50","sha512":"1e829e1d36c138d4a85724fc8a5cf0a3d90cd83e8d4de778543340c15c665357f49e6a8a7e4a2006d829f1dd07dd1f508587ee57bb3bf3bbed91fe4793361846","ssdeep":"192:Ol4Q2Wx/r2bTPMADXEX4sQQTnCnmWSs1iE5bwXRX8ieYnbN:W4Q2WNqbDMuEXgQkgSbwXjeYnZ","tlshash":"2e12af13140cda7a06590b3bd00af3a21dfa9b7ba3d0d3573a46806d30887ec8e5c16d","first_seen":"2026-04-13T22:04:03.243136Z","last_seen":"2026-04-13T22:04:03.243136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1406,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}