{"report_id":"485e9543-b11f-4c27-9a73-f76cd88f0eee","version":0,"status":"done","tags":[],"date":"2026-09-02T02:02:59Z","url":{"schema":"http","addr":"basetructcc.cc/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"172.67.153.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"title":"Cryptera","dom":{"size":3758421,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46652)","md5":"80cd02c5f1126fea98d8c593d27ea39b","sha1":"a6958f6e8708c6cf13aabfec6c31d9ef6842ecb4","sha256":"447a037158f6d32f4eab0b727a6ecc5d06882d6d456963e92ae11bd4cf4522b1","sha512":"2c55aadbf098609996f3ed2c61f17fcadf265f46c2a4467e42cc7037c843574ce03f7332c3f1b9828002d5577f87f6ae0d9c34ca597a9182416365807df8726e","ssdeep":"49152:nERoi8AYUspB/qwVcMU5PiA39D2AZUE/VcMUSx:u","tlshash":"970612b05614169e002787a5f3f93a5c2b2ed29b76414cd8369d1893afc7f64fa4f8c2","dom_hash":"domhashbf390eefa73ab876db0c6ffb18cdfa47","first_seen":"2026-09-02T02:03:26.168219Z","last_seen":"2026-09-02T02:03:26.168219Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"basetructcc.cc/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"172.67.153.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T02:02:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"basetructcc.cc","ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T02:00:30.854245Z","last_seen":"2026-09-02T02:00:30.854245Z","alert_count":0,"request_count":39,"received_data":67020111,"sent_data":21006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5-api.bicokt.vip","ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T01:59:11.316664Z","last_seen":"2026-09-02T01:59:11.316664Z","alert_count":0,"request_count":28,"received_data":466822,"sent_data":19962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"msg.bthdya.cc","ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-30","domain_rank":0,"first_seen":"2026-03-17T06:00:15.56437Z","last_seen":"2026-09-02T01:59:12.081831Z","alert_count":28,"request_count":29,"received_data":2993295,"sent_data":16014,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-20T23:51:24.400828Z","last_seen":"2026-09-01T19:58:41.314246Z","alert_count":0,"request_count":31,"received_data":397119,"sent_data":17344,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.investopedia.com","ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-07-25","domain_rank":28912,"first_seen":"2012-05-22T04:06:13Z","last_seen":"2026-09-01T06:57:05.304412Z","alert_count":0,"request_count":6,"received_data":687515,"sent_data":3978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"basetructcc.cc/charting_library/charting_library.min.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-02T02:03:26.170006Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-03T08:10:36.975341Z","times_seen":752085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/en.eb6ef373.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"055f204d015a226c8e54644f9e1394ab","sha1":"b13d5615be7501fd876952cc5985497c678330c0","sha256":"c5e4e9f61b657701e192e2af67f65e3ce49270d91b7b433d37ea647ffaa0c5a4","sha512":"32e548c5e33f517d3fc9dd05e0db5239eeaf68b335cc86f8d11ef40b48f8fc2b66344f3ef8496218c2c4049f6edafab3a100fb51982971f6cf8afee44fed4bd1","ssdeep":"1536:upoHfOXrnjBPu1X09R+/7D2YRDt13uJaXcS5h/Fo2HlK0nlxLVbjx8D:uUYjs1X09Y/2Ypt1qEcS5h/Fo2HlK0nW","tlshash":"8093399ebb12256d4ad703ba3dda2f1510f9158247a1c46f49ecc4e803d17ed63bb62c","size":95090,"data":"","first_seen":"2026-09-02T01:59:37.910641Z","last_seen":"2026-09-02T02:03:26.20673Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.b080eee4.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47dfddac9d26baaee92a4614885360c5","sha1":"734bc2143793e6176b85cac6928a0c6949e7aa51","sha256":"900a4ec6243dd99e89604e135d8f02497da486e02c6b36840200dbb3526da997","sha512":"776e0b30499e07361d69024bef3f6a1765560d21182c5528fe13b55b53f9eae0cc5ac1d0d668940a2e1b64b286d1b76233e22d56e056f98a99b7c4ab611e2359","ssdeep":"","tlshash":"caf00559f9018f735bdb1c4c55803449170a0f5b79303af3f5925039b5bb522f60e756","size":536,"data":"","first_seen":"2026-09-02T01:59:37.850763Z","last_seen":"2026-09-02T02:03:26.182799Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"00e89972e640cf00d6bb25d7f6a0f6b1","sha1":"b79c376efc93cf523c964570b786bc282ea6cb5a","sha256":"0f863380025b8127f46d4eb0d648fb4528de82df78ae04b8565bebc05e2514f0","sha512":"f1e4129cd37397c398251fe41463db5ea9479932381d7c1600891a4afbbdb52665384e78cd245f762701d0bf746313a075908678a5bb4a415163922963a6f0c1","ssdeep":"","tlshash":"2bc08cc4a0c23e101612651410af25e4a034402670481b238ca4d8482e220b09233e98","size":139,"data":"","first_seen":"2023-12-01T02:41:07Z","last_seen":"2026-09-02T02:03:26.232089Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ee25df141b731e0db791e93312275f46","sha1":"c7de81b170dd04f2ec1244ea637bd67689a2e383","sha256":"ae4221e15a03cc0a37a1367e77b5065b2e6982a21f9bcd3c4daa1338db1695fd","sha512":"e42f5cec4374f848e64dbbc39d7fd67f02f214e3b9b3a8015f48d537257f6282c1b65422bd779b3d779f03192280698a84a5a93c9c4cc3fc5d7c3de3e2cf9a04","ssdeep":"","tlshash":"bec08cc4a0e23d002606641020af34e49024402670481b028cd4d8492e230b0823be98","size":140,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-09-02T02:03:26.232693Z","times_seen":4329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5883e608660ca3e9576fc295eff4aff0","sha1":"1614af2d0325e090f0ba79e0caa09f013aa0c41f","sha256":"c8886c784225fa2ff20fe665f47cb590bbf87f847b5786055bc0dbcc39431eae","sha512":"e5ad9d2fdc63bbf65cd98c3cb2b15c2fed966b097a555418a75a55d2a7578a68e577d42f21c0526f349e4938dab26bde0b670615ca9f6d823fb5e80a02a7cef0","ssdeep":"","tlshash":"44c08cc5a0c3ae005602a81110af24e89024802ab0ca1f038cd8d84c2e220b08233e98","size":144,"data":"","first_seen":"2024-05-11T18:07:41Z","last_seen":"2026-09-02T02:03:26.233186Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-02T18:56:44.566137Z","times_seen":4592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd3148ce4b297108f7fbf9203f9e7398","sha1":"9b9d2196525899c03e14a457061728861e4c1ae2","sha256":"f5b40c3cd95c088dfa10f469341a8e3aaca20ec29a8b9b1b23c293388407ee9e","sha512":"ae948937f0e46d7a4b047de34e93456cc01535951dc9c28984cfedef061fe4d8724519e494e600d974ae2ac824c68731c3425d9f937c4fffb539856c9552b9d7","ssdeep":"","tlshash":"a9c08cc4e0cb3e009b1aa4a464af34e49028842b74881b029c94dc483eb30b48237eac","size":156,"data":"","first_seen":"2025-04-04T22:28:33.677934Z","last_seen":"2026-09-02T02:03:26.234321Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.698e2082.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d11b767d170981efd773716416f84a38","sha1":"0d6aea3817ac2f1f8a46d40bd06033066abeb29b","sha256":"e9a6e8acb6cdf03ac0c6d28e2c9228941d6d8eff027722446522a4530a62804f","sha512":"1215ff74651555d6bceee7b5a6d0aa24a62545d6f61520043a6f2f9e1ed4df1fbb710513a255b117b2684ae9b3bc9b7fafdca1c859a51e331a3932415b1b8cae","ssdeep":"","tlshash":"dfe0268d8d02cbb5861220a4a6154009121869b2a23cd980a298082967b6878ea2fb3e","size":345,"data":"","first_seen":"2026-09-02T01:59:37.837913Z","last_seen":"2026-09-02T02:03:26.207468Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"576a4489954b0c39cf8abb2bca431896","sha1":"0f4c8b93169ecf6d89962732d688b2db7dc95b7c","sha256":"9b6cd3cb84ae5faab1bf1fe2c3cc1ab2239f0b9f4948ce5c2db9c8b7bc1d1f4a","sha512":"e535316c89c8f3d863fe16bf47baadc4027a48ba2a04f460d88756256b47bcbfee27b38705ed466645de94dad85ed41f8a90e3be9c2ae67ff8e399412e25aee1","ssdeep":"","tlshash":"4bc080c5a0c37e106601695555bf6cf490344116708857539c94dc453e174b5a237f9c","size":169,"data":"","first_seen":"2026-03-17T06:00:28.355766Z","last_seen":"2026-09-02T02:03:26.234842Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"17ca193ea0d780b1323a1522b633e6d1","sha1":"918b237c71fff4846055f5d5f673066b0cfa8d9b","sha256":"db54918fad46cbc9e95fcad606cc58b06f9717b3f7a889d587f9dd5fef65c6d2","sha512":"5f1361ef433a830cbfbb7eb6e4f17c6c7883de434a806a8b9935fc353881dfbaab917d901fd9d9aa439b4dd418dd7cdf79f131437c624c60a3bcd8430b14ee43","ssdeep":"","tlshash":"51e02dfce11639104f028a21fa3e38e0103c801b71804b3388fcd84e38270b4a32bbc4","size":320,"data":"","first_seen":"2026-03-17T06:00:28.365416Z","last_seen":"2026-09-02T02:03:26.235336Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fda026047e8eb1a5882e868c6621ecb4","sha1":"94912222851f4eef4664202cb513d7f3d45993e5","sha256":"389ca4866842c71e748f3385526f79ec5d78e6fc86cf71a48a0c44012c59fd8a","sha512":"c7ddb08213f5190b3cb67a8b6cdb51338e1763bed5a088339a123b7fb1f6e67f25289f103a5664785612b1782a4301d3d9d16f8a6d466cceca1e1c1814af3145","ssdeep":"","tlshash":"d3c08cc4a0c62d002602681111ef28e8a028842a70481b039cd4d8893e620b48233e98","size":141,"data":"","first_seen":"2023-08-10T20:40:22Z","last_seen":"2026-09-02T02:03:26.236146Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-09-02T02:03:26.236793Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f25a8140249733e7c6a6eceddbe032c5","sha1":"f292236e45c778013ceca7382bd46eddbe568905","sha256":"30566b4534327e1b33692707554a64b3c681622b6059a7df0601a4614f6c84f7","sha512":"bef76fb33275071bcd4fe25e81e447e390ef78bd8a41b85c050a86e409a1eeecf37e6a2447104f901310505789484fe5e08a96906d66c9c7a5f3a20aea02ede4","ssdeep":"","tlshash":"a1c080c860d73d1056466571106f25e490348026719c2bd38c94d8953d234f4d13bedc","size":162,"data":"","first_seen":"2026-03-17T06:00:28.339269Z","last_seen":"2026-09-02T02:03:26.237332Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"54ad4f75ad8f4df06144cdaca98e6ef7","sha1":"ca53ef393057f70513310ac714ed536ede6b488d","sha256":"f7dcc960b83bb7a60b524ff50795dbe2df058c253f08be3a95a5edfb57221ad5","sha512":"0a122b6de722416fdcba8327e46979bc781452dcb36ea42cedbb185ef17d8ac84145cb0fa8f248d463cabdc6ae98fa697d1fa99e1930813bb4a6dac1de803239","ssdeep":"","tlshash":"e3c08cc9b0c36e102617a85050af38e490244027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-08-29T17:49:52.026594Z","last_seen":"2026-09-02T02:03:26.237816Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-09-02T02:03:26.238334Z","times_seen":583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c2c0f02da1221df1a460316c189c39c5","sha1":"9cf739efb68581199959e88e4d5389a219b14f1f","sha256":"1c7cb5ca1eacd41ba7a1e6c05c7467ba9c5c534d08829cba69daa4e426e5e10f","sha512":"24804edafecdf1671107cd7afaf34ebdcb0da278d2ccee751b6dc173af8a4a4d64d64d54776be724790cd8c3e07f49292548c52f702494c9a5763956e6e73585","ssdeep":"","tlshash":"cdc08cc4a0c27d001602695111af25e49028802670485b428cd4d8483e220f09237e98","size":142,"data":"","first_seen":"2023-11-22T06:47:57Z","last_seen":"2026-09-02T02:03:26.238836Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d43a736b418e65766e3e82f03fe07f10","sha1":"7f767a07d8aa0a229122ecb4e90cd2d5625800f6","sha256":"84a2438c88e50913db7af3acd2cf46247873d7b15b89bb7f22808500a6710256","sha512":"32a04e3040540a17a69279ff70549fb861d5993de837edecdc7fd7ad0feb3d8688e0d95eb1f3d4af5c291c1ae4dce2ecaa914eb657cbfb3db102229e745c2549","ssdeep":"","tlshash":"01c08cc4a0c26e001602641010af25e49028802670481b028d94e9483e220b08233eac","size":139,"data":"","first_seen":"2023-05-05T08:00:35Z","last_seen":"2026-09-02T02:03:26.239353Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e62bf3de8efb7091bf34a82fa236d353","sha1":"4a862d1b11ba0f8da83041a6f9b39d35298944e5","sha256":"b86f15780dc1fc80c82162a0a5a47a04400d76d3805318c8a4354cd92069ca0f","sha512":"cc6c08bedaa919153a2201e048b2bd8a3668f239c3599d95d235c0970a872a2437d21b2add54a2c646b84755d060b41930138d84c6c65a4ce58586892bcfe1f9","ssdeep":"","tlshash":"a7c08cc4a0c62d10160a685010af34e4a034403670881b128ca4dc482e220b09233e98","size":141,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-09-02T02:03:26.239885Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-09-02T21:13:24.469016Z","times_seen":3360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.3a84cdc7.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0297cbeef233f9a9f42afbee5b5e951","sha1":"470694d797ac2b7d7efb1f4244892068a9b9fb9a","sha256":"ad8b5b0befb356686a2c6ca915aecb6507eabd7743bdfa5ffcb476ed7256239f","sha512":"dec028316baac41b84acd0974fb871ae6e77835d94645a38c71d288814021731a7090dd09940bd001ec47939c936d9550287afb7d6d09e8e41fddcb366a5f70d","ssdeep":"49152:1Bmu2DOQGRAN9ioPJumCcg6eSF+Y3PX+uKTn0o/QwS1N1arnznWyvh7IV61iasQA:ip47hT0gon47x7p7w","tlshash":"6b86c0f4b250b42503a760b5407f0406e7395a1b644e84a4f66ddcea39bde49a37ff38","size":8572604,"data":"","first_seen":"2026-09-02T01:59:37.975343Z","last_seen":"2026-09-02T02:03:26.242102Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"546e5f8e2214a3f27776dda45edc004a","sha1":"103ad54daeed3f88aa73b72e6225d2d79e171f56","sha256":"9bfedaf2c436445f2478d584e64c1b9fd8281b39958124d89ea711269cb40167","sha512":"0f2a938d989b4e4545060f482ab5ed5af2f326b7639adea0192f9ae97e0c1629f54837d93c837222bd7b30b7b03b4efcc1a32c0284cf56057838f719058389bd","ssdeep":"","tlshash":"c6c080d9e0d67d1015455a5115bf35d4e0344027b1489b468cd4dc443e671f49137edc","size":173,"data":"","first_seen":"2026-03-17T06:00:28.310072Z","last_seen":"2026-09-02T02:03:26.242662Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-03T08:10:36.975341Z","times_seen":752085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"30039439b78d9981f4298efda625ae67","sha1":"db357e4823ee6b8aa83d1e340de531bcd5a268b8","sha256":"e92c6f643b69190c4a3d6cbdf4b64756f23f288630112b27b7551eea7763def5","sha512":"b407b2e785585aa2e621d71a5fde759605f4be16fbe19edb3b6ab8635011cd7515736ca216b287dfed5c8f0ec11caba4b0477619e15f15fc50b5190627c49d2c","ssdeep":"","tlshash":"75d02bdae3a13a050611515866ae3cea90389067744c2f259e70d85d2622071833bf7d","size":273,"data":"","first_seen":"2026-03-21T02:57:02.26109Z","last_seen":"2026-09-02T02:03:26.243248Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-02T02:03:26.243714Z","times_seen":1869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-09-02T21:13:24.898742Z","times_seen":3514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"267e4fafa58676a639ec17ea049da784","sha1":"06ad7be2448f6fd45927e988111a9dae8168c0b7","sha256":"37031d3ede968fb43c9d23fd9a1754d2c704dd4341d4fcc0e8207de95f6f6e08","sha512":"724f5d1ba3b1b5c4be43d4a5980b1de63e7b35a3c361d6cf337920c9c0718d53710937a3610decfcb4df64bb8788d86c1ca90e556ac61f6d73c01e8d13c310e6","ssdeep":"","tlshash":"31c08cc4a0c22d001602641010bf34e490244426b08c2b03dc94dc883e220b48233ea8","size":141,"data":"","first_seen":"2024-08-19T17:43:12.076157Z","last_seen":"2026-09-02T02:03:26.24477Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"73d6699afbc683b3cce124aa422e5081","sha1":"d4e35787109d77ac1404c29ae1bf5ac5153bf438","sha256":"f74a4a758072f2c6d990a7cf219d63683d330feda6220ecd0f0aac7e8035baf3","sha512":"f8b6351865a4e6e6ca6741c488db5a46d28f3e2d82c321fa012c31a73456a206df9412c9b7b78e925015c4b54488c9df6a42e6d60dfd450a6f3d53ef5bf93715","ssdeep":"","tlshash":"f4c08cc4a0c7ad002642a49020bf39e4a0248427704c1b12cca4d8893e220f88233ea8","size":141,"data":"","first_seen":"2026-03-17T06:00:28.348806Z","last_seen":"2026-09-02T02:03:26.245346Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a23aff832830cbf2de5e5a32bff8efd0","sha1":"e900480dd8a24fb1d402c2bc0b28394edd2c1488","sha256":"7674ae03c44ddb3a4b3a3e4add5fbe1f21401405dbfbad6968a052987c45471b","sha512":"07a64bcd5da905cf34b44040e094efb4d46923345d6365446115d52c2484aa782e1e1c007ee65e02db4837932d9cb1c50d65f32ca54dfd7d647ba13d4b6edb03","ssdeep":"","tlshash":"00d02bc7a1a67d01840659a134ff34ecd018a53a552986279d58e94d29a31b0427be68","size":265,"data":"","first_seen":"2026-03-21T02:57:02.247728Z","last_seen":"2026-09-02T02:03:26.246102Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6ad056c5d1737da06613e868c8cb1474","sha1":"f1af5a75cee8e10f3368ca852ebc58a66ebecc81","sha256":"5e1abbcedfadda478cfab8528cc820279063dd64ce46e60158509c0b3c5dd461","sha512":"bc1e8552178f5814a6e1a4ce6a949b1422d5082968f18ec2cddc4781693200b256de89998a9596efe717432f5dd862f6e87f72514040f5600551b2993221c498","ssdeep":"","tlshash":"fdc08cc4a0c22d101606682011af24e49028402670481b028d94dc892e630b08233e98","size":138,"data":"","first_seen":"2023-12-01T02:41:06Z","last_seen":"2026-09-02T02:03:26.246728Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/app.02a721d8.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53588a284d62a682cf64fa8ad4225e5","sha1":"ddc321e65d678d0969e2d10463d3ae83dfdbb7a7","sha256":"5a7b76423b7ca6dacb0f9050e43dfa4e66a378dfc04fcb90c04e884d280a107c","sha512":"62d125135e7ad732d862771a4c9293cc297387b233957fff270dd61cd4242dffb04651e6c1fcb4050a5b414e3dbd40652f354221481f1c1c0054aaa7d414fbba","ssdeep":"1536:dOs5M7DJnznkHZ2vZXf6rcNWCvnGpO2sNqF0CwPj1gDzoYKz2kB7cC+9ZFgLBxRe:BMZwmpQ5FW71gDzoY+xDchJZvWw","tlshash":"9f146ba810e41479d36e439391ee36082dfc3a9778c08cd4badddcd517ea8dc5213b9a","size":204041,"data":"","first_seen":"2026-03-21T03:01:26.960114Z","last_seen":"2026-09-02T02:03:26.223991Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"30827c46a8bda3de9db15104d94cac3e","sha1":"f5e6ce57ea5e12af64870f622b8c0e98a6692d94","sha256":"2e160e9e45c22c413ae9d7de9768692880a0542d176c582e3d93572b74205e8b","sha512":"77128731fa2125e9e3c5649f6bd2d4763414a93a674caafe6f6c9f3fe4056fb02104fb6d4f07322092497d53add1ae01e118ab2c7296185d073b817cbe4080ae","ssdeep":"","tlshash":"44c08cc4a0c26d102602645010af38e49024402670481b068c94d8492e620b08233ea8","size":137,"data":"","first_seen":"2025-06-03T00:52:32.289694Z","last_seen":"2026-09-02T02:03:26.247228Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"55eab27e2d2504f27d38129961e72d05","sha1":"f14db79406ec4dee9348b59e9423f92745b55d2a","sha256":"adc2a2dd58ddd084a18ba5ceb900fb45ab7b9253ea44e14e2e5ae467e6b4bb3c","sha512":"3625ab75bad77183053f4068f125718ca92d419fde86870ebef43e53073684e46373e8d731034845ff00589b92c757d923008ac0c57616aa318ca344000ed334","ssdeep":"","tlshash":"9cd095c570c719405619e7112c6f34f950389012f0cc9e474db0d4a95d170f4523fda8","size":250,"data":"","first_seen":"2026-03-21T02:57:02.26505Z","last_seen":"2026-09-02T02:03:26.247731Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c768ded61bd606f38f5f37856ba8d0","sha1":"960e99a8de3e56e5a43acf540a5ba5681e664c88","sha256":"662f30f60512e5725d4e41629214a3c837a3e71248e792a4aa73e522e3c1fb8c","sha512":"5cd668ac0755e11ef0237d8ac039d29f8127ccb7bf93116201a35e1d8f193ebb711a1852726e966b88ce2c24291e7842813bf73d201a97be03d2e5e4924bc3d0","ssdeep":"","tlshash":"0111affe1a1a71296303405e976b7511742290ad000a1452778c9a9dab9afadd0cbb8d","size":1050,"data":"","first_seen":"2026-09-02T01:59:37.939369Z","last_seen":"2026-09-02T02:03:26.248169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef90426fbf3ad7739985fec809846d5d","sha1":"78a782ecce9b8d46c45926e1a2601318342f100e","sha256":"21011c7888dfc3f8de8181bfc2bca2877d0d7e82bf4df10c9ebd51ea4579af37","sha512":"0a67e9ed26d7005d3b68228b603ff1c2515bcc5ab86f9a80a1b1027844c64cc9ab46c4da0ab46dfaaf2b0bbc1a4c4c053a1bbb70eee7bcfaf6945dc8cb1fb09d","ssdeep":"","tlshash":"3e01c21a51b544b040abb33c9b6fa780223100c76408ae057e0e9f846f1863d1be0ade","size":721,"data":"","first_seen":"2026-06-07T23:37:29.55548Z","last_seen":"2026-09-02T02:03:26.248763Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5bd59e82477b27e757956b33c9c8128","sha1":"b331fddfd4f3974c66b54a5efa5aeda6db358392","sha256":"2eb06f4537cf7a8a69c67ff5fe427829a032695b1939dbf5e9a5babbea0f699c","sha512":"1e32b05e859a58db6b826b2e34417408717c4e02f6fd7ba17baa93ab5a9d31c20726dc1cde80d70bafd03e935edacadc9e678a679e6eac766add331e86845a1f","ssdeep":"","tlshash":"98c08cc4a0d22d001622641014af25e490244026b04c1b128da4d84d2e620b08233ea8","size":140,"data":"","first_seen":"2023-12-01T02:41:07Z","last_seen":"2026-09-02T02:03:26.249237Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fd36096a936b69fbe1eca8358ce0d045","sha1":"55f96747a71eeb9fd0902dca8b5042d06c6fefab","sha256":"95c202405b8f1e893e9f61c9981602622f285691cfb689114483ee81ff96616d","sha512":"9eb450becfa9a713a0b4f995cb4feadfa2f004a694e4fa3cc6fb7c44695e0220e28fc4620eb27e5d3213bfff8f2e638294d7a694692b854ffffa93f911513dea","ssdeep":"","tlshash":"dac08cc8b0c33e003606a46064af38e4a034402b70881b128ca4ec4b2e320f49233eac","size":153,"data":"","first_seen":"2023-12-01T02:41:06Z","last_seen":"2026-09-02T02:03:26.249741Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7235101996711299a0241e3ec41881f1","sha1":"5faff5620f3a0b8b36756cdab04bef5db0e7f73f","sha256":"b83168fe0e64ec914a3462d5560ced2a1750d83493de00b77d2be3485de6d16b","sha512":"872bbb51d50c03d24d5f130d11cc4208e2b56af2d8df877cb281dccd0195f78bad1539c3f858440530731fe74a5487cb32b17606442adaec0d2f9f4b833f9474","ssdeep":"","tlshash":"0cc080c9b0e62d501d125915257f2de890354036744c57139c94d8493d530f04237edc","size":158,"data":"","first_seen":"2026-03-21T02:57:02.25728Z","last_seen":"2026-09-02T02:03:26.250238Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-09-02T02:03:26.250822Z","times_seen":1201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ccc91df05602023a1cc0addc9735d160","sha1":"8a7338a5e0da573be6f609a145f0a4f1e42f4495","sha256":"6d027313e7e059a99fd43a8c968b6a54c668d85bb066a4fd5c88bc1fc3136f67","sha512":"32fd4001dff4793b2d848ee75c1edd2550ebf4a831eee05bbc606cdefe8a99a9d9e8bfccfea37d687a24380e2ae86172965c685c6fdc9a2d85746c54365d8806","ssdeep":"","tlshash":"7fd023c4a1d7bc1013216511557f35d484244013744d1e12ce40d49c1e525f44133eb9","size":197,"data":"","first_seen":"2026-03-17T06:00:28.360716Z","last_seen":"2026-09-02T02:03:26.251423Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"922657ac7de47226c1355f84fc6af405","sha1":"c89b213330581b451569b0cfc72df812da58ea6c","sha256":"40c3510c15c5c92e95251c093f790bcb4965db72dcb661f87cacf0b1445a6e9e","sha512":"f1cb74a7e856c487b641c58ece9a44c3a13e9b6cf50366352c43f7bfeeba594b7f82d78d494f8706002e374cf625ff9de08f9cac185886c30d2bf726cd66772e","ssdeep":"","tlshash":"a2c08cc8a0c32e003602645010bf39e49028442671881b438cd4d8883e230b89233e9c","size":147,"data":"","first_seen":"2023-12-01T02:41:07Z","last_seen":"2026-09-02T02:03:26.25207Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c768ded61bd606f38f5f37856ba8d0","sha1":"960e99a8de3e56e5a43acf540a5ba5681e664c88","sha256":"662f30f60512e5725d4e41629214a3c837a3e71248e792a4aa73e522e3c1fb8c","sha512":"5cd668ac0755e11ef0237d8ac039d29f8127ccb7bf93116201a35e1d8f193ebb711a1852726e966b88ce2c24291e7842813bf73d201a97be03d2e5e4924bc3d0","ssdeep":"","tlshash":"0111affe1a1a71296303405e976b7511742290ad000a1452778c9a9dab9afadd0cbb8d","size":1050,"data":"","first_seen":"2026-09-02T01:59:37.939369Z","last_seen":"2026-09-02T02:03:26.248169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef90426fbf3ad7739985fec809846d5d","sha1":"78a782ecce9b8d46c45926e1a2601318342f100e","sha256":"21011c7888dfc3f8de8181bfc2bca2877d0d7e82bf4df10c9ebd51ea4579af37","sha512":"0a67e9ed26d7005d3b68228b603ff1c2515bcc5ab86f9a80a1b1027844c64cc9ab46c4da0ab46dfaaf2b0bbc1a4c4c053a1bbb70eee7bcfaf6945dc8cb1fb09d","ssdeep":"","tlshash":"3e01c21a51b544b040abb33c9b6fa780223100c76408ae057e0e9f846f1863d1be0ade","size":721,"data":"","first_seen":"2026-06-07T23:37:29.55548Z","last_seen":"2026-09-02T02:03:26.248763Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1183e82d760e166c18b0c2ef157f6e8d","sha1":"1a0ab7968377f8fbb8e092e23ef4295334a73aca","sha256":"b2c7111c2eef9910d6d23774f66c9149760469e36f64eb93d230cbb7479df2d1","sha512":"b132cb55208ddbb7e3df572427dd27daf56f1779c9fcfc48a2865ecf1f0b9f9627b847a6c54acd0692a5908e48465b10fecbbaca339059f92be25241c8f9dcaf","ssdeep":"","tlshash":"6ec080dde0d22d0055565451167f35d4b03444267d4857169cf4dd583f320b4a237e9c","size":163,"data":"","first_seen":"2026-03-17T06:00:28.308281Z","last_seen":"2026-09-02T02:03:26.2526Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eac14eaf8ed68501a84eef59b61394d5","sha1":"8c47f48b5e42149ea697399c7768ea26b4eddf5e","sha256":"3ae27e26774f533ac832e66e67dab252d5a84c5eca2b04e49013d4eb447274d1","sha512":"71ec444e51978c7dc1e948f2e431004077a4cf4ac9bc4638bf9626d9029dfbb65f2c9baafd020d70e965c8f7cabac51ee4cd8d1f8ca4f96abd0fe9d98c4c5280","ssdeep":"","tlshash":"aed0a7e6b087af556605b21454ee11eda02a445771886b52ece4d8042f520b08637eac","size":217,"data":"","first_seen":"2026-03-17T06:00:28.333568Z","last_seen":"2026-09-02T02:03:26.253177Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d9d2c2321eae817af627547e3de0b29b","sha1":"baa91f2218af2bce933b676c2bb92431689a34bb","sha256":"a822cdbb02be0838da552a202ed48d4c22059e41be06e314ccf61fdac0aaa42b","sha512":"a8bcf0492585ee5c620215de049feba8170105cce12735d1cfb9f3aa654a18e0e91bb1ce46255d4409017b9979efa4656a6a60322ccc9baeb911070b0e52c81b","ssdeep":"","tlshash":"fdc022c0a0823c2262215014197f20d8a03c0013b00c2b03ee8df88c2e738b08223ead","size":181,"data":"","first_seen":"2026-03-17T06:00:28.315056Z","last_seen":"2026-09-02T02:03:26.253684Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"555034f1ab12462fd997631b0dbce908","sha1":"3840ec23c7f10b6a35d545f82540df9d96de0117","sha256":"5ae06477b67dea4e8bbf2a326673213f29a93b8927faa9bd62bbc9ed619dc8df","sha512":"de9c2bf7b72265d89b3ec596af3cf31a5cdd428d22b73b0e86c35a001eec28d99c9aa48a3318b21c6392281e22fd30ffc03ac06bbc2235af29c2d1996b1854f3","ssdeep":"","tlshash":"aec08cd9a0c32e00660b655514ff35e4a0354426724c2b439c98ec882e235f08233eec","size":157,"data":"","first_seen":"2025-10-07T02:49:21.615577Z","last_seen":"2026-09-02T02:03:26.254261Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fca7c336bb90edaaed151c97a9700f7d","sha1":"d284144f39e81f64738f97e3a982ae784af26023","sha256":"01032e23dad398d4ccc77471699c0fe99d3b7ce813838d81c2765db97da17a50","sha512":"eda120032181fb615355a835e027d39508199453a1bf0f4e1365b155515e88fed857176c28216e2b45091c926d3b74b8ec28dc82edb878c0f85d4b541e1386ed","ssdeep":"","tlshash":"d0c08cc4a0d32d001602641010af24e49024402670881b038d94d8483e220f08233ea8","size":136,"data":"","first_seen":"2026-08-09T21:35:45.418537Z","last_seen":"2026-09-02T02:03:26.254715Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-02T21:13:24.573139Z","times_seen":1798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a9206a0c13990d1def6eb46fdb956fce","sha1":"fb120fb6e5fd3cb6f5b0a1ff88ff3ff7c80a88c5","sha256":"ff3405e4d01647362fa909c6aa8a0accec0de7c2cab964f1e3497ef6ad2d9364","sha512":"27bbf99aeba6ba579c6927e29f62483ae0b699f465a201b47d0b97575d2021beb88ff7d84a5fd8adec8a1a33224dfecd21f3c11058a74641243ed404666b5879","ssdeep":"","tlshash":"d6d0a7d8948b2d100b16b994146f38f88029441b641c26628d99c8582a730f44227fe8","size":209,"data":"","first_seen":"2026-03-17T06:00:28.306061Z","last_seen":"2026-09-02T02:03:26.25573Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f724768a323e982ca86e2613eedc9c97","sha1":"b772833eedec4a552610ba98be489ad02d9fa270","sha256":"7f0a66087c94ba473e74562d93d8ed504fcbcb750bfcee109cb9d3f6ff64d3c9","sha512":"650d033ac66dd68322a3295b55ccf82aef0066bcfef25f00f155595cc7d19f19ea96cb76771e2eb72681b11ac4f6532323580cb69f2c34757134dcaee6cf37cc","ssdeep":"","tlshash":"c6c08cd8a0e33e006616655220af24e99038403678885b028cd8d8493e230b4923bea8","size":152,"data":"","first_seen":"2025-11-13T12:01:22.686887Z","last_seen":"2026-09-02T02:03:26.25624Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"23b578ba938dbfb863245105b4de0cb5","sha1":"4f74518e24b4030e0fd1b8e65e8d4ea9a7169594","sha256":"ab3a546347880e2965bf8ea51bf14afe84ea3841b62623903736053e0bfe0925","sha512":"8f059a3fcfa33797d79b14f0b25f182129ab9c13e9d2a1db1a2425c295d12b25ea449a86917ce53c8f908d8e1b5b610c94b125d0bec8a1117dd07e7ca00996dd","ssdeep":"","tlshash":"87c080d460d37d102756755414bf35e45024802771c857878cd4dd453e630f49337fd8","size":168,"data":"","first_seen":"2026-03-21T02:57:02.294558Z","last_seen":"2026-09-02T02:03:26.256832Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea0abeca2baea92918e31e9bd426c262","sha1":"363669009e4dcf14ac822f7a05c643d32f1336fc","sha256":"923620f3c67fad10f754fcf57e9a9d8cbc41ae2032bde226fc4c6decfe2d2d71","sha512":"8e976d54f9faa77706fad436ca05d825821edae545a6305820a31635931887aa7c8b560b02581c14bd58061897fb6e5f66575de18b05686ff0b1c7ddd7a637f7","ssdeep":"","tlshash":"44c08cc5b0c32e241a02645018bf28e4a0244427749cab028dd4e8883ea20b48233eec","size":152,"data":"","first_seen":"2026-03-17T06:00:28.364486Z","last_seen":"2026-09-02T02:03:26.257389Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe38a231daabca7ee9331f1601a08e31","sha1":"22bf55758c90a53410cecd193fcb1c3216367d49","sha256":"f5bff08a53c4d278175a0a1220019e39232feb024918177f6d0f522dba4e8239","sha512":"6178f6fbd722656b8158b1b081cd981cf60e36eef4fe02d52f733a4df6d2e2570223735d03f97e55563633cd69218cebb85f2685a8d3ea38f4fd2a7f0498d266","ssdeep":"","tlshash":"77c08cc4a0c27d002606641010af24e49024402670481b028c94d8482e220b08233e98","size":136,"data":"","first_seen":"2023-05-04T20:29:59Z","last_seen":"2026-09-03T08:24:25.179299Z","times_seen":1593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcb31c7e1a6b55a4e723a687ff36af55","sha1":"1d9afe7d4e4e6d50ab5db24c3ea725b606643e95","sha256":"7aee1fea8e826fcd49aa9db3396af595b6fe0a95c249194fc5c3953d36fdebff","sha512":"a1f684a77a1c13132381743aedac243398b1a6e1dec9a50339524ae8e583f6d5d7a88c04f83a6778642fd19e6efa4e0486d5eca2e33f55c22f08afa25bd1a98d","ssdeep":"","tlshash":"3ad0ebcaa0ab2e200b62d52430bf28c0e224803f34dcaf19dd84c8825ae38788377c95","size":279,"data":"","first_seen":"2026-03-21T02:57:02.278515Z","last_seen":"2026-09-02T02:03:26.258452Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f34cd456732667cb44caa106e7eadeca","sha1":"3b39ae16cc03ec7be03516f0361984829c7694da","sha256":"16fa55e171afc3308d61f47ecb8982f786faa69edcf51afc660a3b5d0f4fb6f8","sha512":"e1acd08fe31bebbc2c719220f8128f2a450a9a711436e9161f6e2cf7b58acf2fecbc6066e790f59c18486fe77d32285e005079186065b862c6d906331bc76bbc","ssdeep":"","tlshash":"fec08cccf0c22d201a02b91416af26e49038442774486b468c98e8992e230b08233eac","size":148,"data":"","first_seen":"2026-03-17T06:00:28.337269Z","last_seen":"2026-09-02T02:03:26.258979Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-02T18:56:44.488847Z","times_seen":8599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ef19776db50e7e3e1fe0dac4a6d0b299","sha1":"65f5128e776e9f2961eeb33fb0632ed37084a01d","sha256":"017b5f2726c219072c07c4f2f333f3ba2b2095d44c4a14bbedd98a88399f58d4","sha512":"8c54ac9a5e01e8d70b4ab06a400a6de9472126d2ad485f01e86e8dfbb3e4552794779a9e82c13ddfdd6c4c8ae13d7180ad25ddcb54a2be4c64e410fdcae99ecc","ssdeep":"","tlshash":"cec08cc4a0c26d24260a691010afb8e89024402a70489b038c98e8592e324b09233fac","size":146,"data":"","first_seen":"2026-03-17T06:00:28.342641Z","last_seen":"2026-09-02T02:03:26.259991Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a115381d36493890b777d1bc33d50e03","sha1":"3fb335945c2950cbc25ae0fc357d0b1707a6de78","sha256":"abe8842ba5d187669c3c3d6eb61e8a691fb2311a4de8ead3fc68ea00b0d49e25","sha512":"363438ca0bcbc75c1ac1911f0debb5dac3c1c38ff0f06012c4d32dc37f30501babe07f0114ebf179e401b8d64d85917ce74b7e5a3cbe6b20442bbf850a911f13","ssdeep":"","tlshash":"d4c08cc4f0c22e201612641021af26e4a028402670489b138c94d8482e620b08233e98","size":138,"data":"","first_seen":"2023-04-15T19:29:40Z","last_seen":"2026-09-02T02:03:26.260621Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/chunk-32e34531.5e57b886.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fde0a83b079a23e9b8ef8b32ae856f5","sha1":"0ea39fbaf39d6c89631aaa383c08ea8a0feead33","sha256":"7c60d9f7a2786e5725f3a933b25eee5a1661af90066a139f19982670637a7dfd","sha512":"cc99d43f10f86ff9b8d68d2f3627ac0206f9afc5abb380dfb5eec0760ea13bcc9175dc79ae2cbe213d29166eb7126d7c85ba66903ef4ee1fdf476075a47e42c4","ssdeep":"768:qc+drILAb7iqb1IYELxTE1uGbCAb6mJtA5GO82JF:kj7iqtNGIOd","tlshash":"c9d24c3660d5d83c7e269142354a260998252ffbe00a8cd9f3729dd58cdb89a733db7c","size":29667,"data":"","first_seen":"2026-03-21T03:01:26.949376Z","last_seen":"2026-09-02T02:03:26.215993Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"abdc30e90506a023b3c497b814bd9c4d","sha1":"eb28437cd43c6003155676309d0ff5fa57e913c4","sha256":"7ebd43618083fa159c31a4edf375b6180dec48fc13a1b4e2f96ce347566abde3","sha512":"075dd7ef89c8e6d121a9d8e7927f4bbe993b59f68a60cc3a4fa1fcd742811ad26e7797ef2669239947a2666e3458df0549fcce5e97f2597a9064ca607c5e4974","ssdeep":"","tlshash":"7ed02bcad2873d1003519a39557e5cd8f6254476a2987a039ce4e6542fb20f89137dd8","size":271,"data":"","first_seen":"2026-03-17T06:00:28.313206Z","last_seen":"2026-09-02T02:03:26.261179Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"569d4a12bb8338a8e4f229485a32094d","sha1":"5c26e4ce877e9bb4497b605dfcbf9514a3672e24","sha256":"629c88b85fadb84342c9608a7c2ddf18ef9261b507c02fac9564e48a88ac879f","sha512":"70e4ef5ce5b0d04c6f4b918e73a0313b20188e1f496cd1c5caab76e533dd68c672d1ddca94d46416aa7c6824b3bb0adf011e7b0746dea7e678a93d9cd32e7598","ssdeep":"","tlshash":"a9d023c5e4877c286b477410167f74fcc0184416204817178d5cdc992d531f45133dd8","size":201,"data":"","first_seen":"2026-03-17T06:00:28.31807Z","last_seen":"2026-09-02T02:03:26.261733Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"549b3c08c1f43e8543d0d68f0251dd78","sha1":"d8b612700f5733a020c19ef5359199239711a1cd","sha256":"756039e9c2a04bbbfb30518e722e02917751ddf11eee0bdab2aae0947c5e8820","sha512":"a0aef501e761f58626ccf4c2e615290c5a5c56cacd2c4aa2f92e470ec7ca9397cc2d270afaa7a1072df9abe62814fad0ab0c6de95240aefb6cba85e7797f1516","ssdeep":"","tlshash":"ebc012d8a19b29502546646421af74e8f0244526a1481b529d98e8592a664f49233eec","size":178,"data":"","first_seen":"2026-03-17T06:00:28.338344Z","last_seen":"2026-09-02T02:03:26.262392Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10f19c9a3998430925bfdcab937d2608","sha1":"8b70a4acc9c556d3f1fbe5c619b7144f9c3cc90b","sha256":"7f89dcafc78290472370d0d04d34849206da87f29402615c675358f6c5c8b6dd","sha512":"f39a2c3a0b237d4bcdb7e46fe5e6d8afcf9c0a18b74dba5e560f1c5579812b4b7ec61e5b9a871734cacd747db5b577d66f63f5edfcc0582a468e9b7e7945e310","ssdeep":"","tlshash":"7bc012e5a19639115b05a518107f29d45024442a64586e229c94d84a3e620b88267e9c","size":170,"data":"","first_seen":"2026-03-21T02:57:02.283041Z","last_seen":"2026-09-02T02:03:26.263091Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b6462b0ad6e14bbbe40f65bb64267a2","sha1":"ef1ac302b9b4f310518455b7078bc7c6b6c176d5","sha256":"1535c3001c4ca05fc3ce51cda44171c551a4511193172333f4adf1c736544436","sha512":"a212e2d89e1bbc173e2413222605876a984e21e763c383912a215042d7ebd0cea3a600e348183da77498fbe6706a3884b06ba9894dbc6e36f55c82a67db34dc6","ssdeep":"","tlshash":"c4c08cc8a0c66d001612641054af24e4a0284426b1481b038d94d8882e220b08233e98","size":139,"data":"","first_seen":"2026-03-17T06:00:28.319029Z","last_seen":"2026-09-02T02:03:26.264121Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea29b2d8e3748df2c7234f1d0f0bf615","sha1":"6eea03de5e9967d67cfeec68f381fd35a4c0cb05","sha256":"98f60cedabaccf7c28f650c8351f2b4fbf7d42616467ef0da34c7596195e8d67","sha512":"7ea834e522873d04148f3a529e43ce234ac035f86e352502b4fa9b8d68865682fb80ce64f015af37cfe6d164385527822557495f2cb850dd06f702a72c2f9875","ssdeep":"","tlshash":"91c08cc4a0e22e101a02682018af28e89024802674485b02acd4d8482e630b08233e98","size":141,"data":"","first_seen":"2025-01-28T12:58:32.725945Z","last_seen":"2026-09-02T02:03:26.264717Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"03c6a6906198d545d77d3d8873a143f6","sha1":"72d47b0a093451b23bffeb94da7715dd7239181f","sha256":"d869ea2d1e4ecaf76e0330d370a2c57f48651211672bb3a200290f39db6cbf85","sha512":"bae37e501364656c7fa0ff8124d994fa11f70701393199ca5789324a1432679e96c81a12129b95e76820054a02bb7401f3c75f263e1d49649cdc3f63c1d67ae1","ssdeep":"","tlshash":"13c08cc4a0d23d201602652210af35e49038402770481b178ee4d8882e220b88233fa8","size":152,"data":"","first_seen":"2025-11-13T12:01:22.713618Z","last_seen":"2026-09-02T02:03:26.265493Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a75bccbcd7a09dec3f2d31abd167840","sha1":"c5d71ebdb9f83c8f882af875fe3516e695d4ef79","sha256":"96a8924143818d9f6bb992e37e45781e8ea78ecfc291de0441ef5eedb7f51e68","sha512":"4a9b62a9445de55f3c56d8ad2975e3aa4424fe21251e2a70fd1f8a1b2463525504be06ff39840b16ddc82619c3fd85538d487242f81909f176f5e9c563d696f1","ssdeep":"","tlshash":"6bd0a5c661a72c005b5a602515df34d4911850265dcc57058cc4c9547f730746317e68","size":241,"data":"","first_seen":"2026-03-17T06:00:28.361578Z","last_seen":"2026-09-02T02:03:26.266122Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-09-02T02:03:26.266803Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d31ff7e60917b0ed4a4b70d37f66a2b","sha1":"c50f1dcef18065974e84265a1a49bdd0ee29e449","sha256":"aa6fd728eecb263d1055ba5f0b243644492895c8b51fdf396aeb35f2026ac848","sha512":"37b9cf72e1f471ea4b8ab70e1ced41fd251b10d068879907f2f7dd3276ac5c5cd9b0c3b90a731ee5449d42ba3b181ce145207561b4e72ddb32bbf1337361fb8e","ssdeep":"","tlshash":"72c08cc8b0c22d001606641010af24e49024402670482b028dd4d8482e220b48233e98","size":138,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-09-02T02:03:26.267387Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aec54d99db65dc7032ac4a2297cdf2b9","sha1":"1dd165b40980f134e2134ff03572fc7c29679fe7","sha256":"cb408db85c77919ac0e8fb0437ce5a859c2dcad504721a1a8b90c74d77668e9d","sha512":"1d6088843f6d086dcb84fd8d950afee031e7ff20dd76d0292b44ff493816c32935f5daef4ebf6855996a0f6385a1c89786980b264fa90adf0f12b57d4b5f5f5a","ssdeep":"","tlshash":"dbc08cc8b0c26d002612646020af38e4a024402670481f128c94d8893e620f08233ea8","size":141,"data":"","first_seen":"2026-03-17T06:00:28.352041Z","last_seen":"2026-09-02T02:03:26.267972Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-09-02T02:03:26.268525Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-02T02:03:26.269062Z","times_seen":1718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"01250737fe8fca3b635f9d86ace97c04","sha1":"9164136f51a95bb59fcbd680113c143dfd402af9","sha256":"fc0d4a95661084f272c2aad716593b1746886d44d7738e89accbf84638fabf89","sha512":"f46f5fdd2ed48b97fab557d9f1ae5235dc1f1da34533821e572cce89c9723182ff00f503cd53d096540081c9c4a684d151c981de52c77a57e4c663f59e8f5f22","ssdeep":"","tlshash":"15d02b8a20c63911158b956456bf11e8407440567d8817529d60dce73aa32749323dd8","size":252,"data":"","first_seen":"2026-03-21T02:57:02.28402Z","last_seen":"2026-09-02T02:03:26.269589Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0faa2c2e1d007cb94109e032fb71f99b","sha1":"a9a9660cea8e6eb0d7d5e4e0b869f0c0ef015512","sha256":"f6635a4d1b1b29d699f28aa233a76a675afd1b2d82c647034d79413f460e14d5","sha512":"4349c3cd389e84ebf7a0372810f6923c05af2633a1b117a9eb088a59174df441e774ee64a04ea3f53821f88e9aa3d1c340c051b4e631eb66bc20d85e75dfa498","ssdeep":"","tlshash":"0b8004cf5150113cdd7110c51d35531d3c0130001341110053d15014105df17c5d41c0","size":36,"data":"","first_seen":"2025-04-20T01:44:49.48786Z","last_seen":"2026-09-02T02:03:26.270199Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/chunk-vendors.fbeada00.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91c836886362685dd09820d1020f4a1a","sha1":"93865c4bcbd79d4ba7218fe36ef862dff0638872","sha256":"f9767b6b01cc38519369b38ee65dbafeb8799bea532dd19fe9828b31dd31695e","sha512":"bb37e2ad55e99b49694921edecce8d7a6e54ca9c341774fd8f98cfc692f688a188c0ea0690f07670efce727a72d9f444070d886319eaff94081128b34a2fafa3","ssdeep":"24576:JT4hu7iMWZ8wh1nAukdDO3Xyr5Ir5eR0dTzthM:R4giMeHM","tlshash":"ef052b8eb1c17025136354b141ef050af23a9955b40a48dcf261f4da6fbea4e626bf3f","size":850529,"data":"","first_seen":"2025-05-30T06:18:47.007908Z","last_seen":"2026-09-02T02:03:26.179894Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f8b4ca87e09b24ecbe1a1b8da976d999","sha1":"9fd5c9f5705da18d81c225efe01512bf1cdc514f","sha256":"2767cfaad2681dee47e5d4e8fd6fffd7fc531ab6027a05c9c5e1726b95e19890","sha512":"0bcd6e22554d62cea25ca0689068deeb388a4fb20fd5c8760c60011947b8588a4089fdc780e724189581358dec8a377176e40d5f5a6bf5f174b96d955d808b6e","ssdeep":"","tlshash":"aec08cc8b0c32d002602642014af35e4a024402670481b028d94d8482e230b48333e9c","size":140,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-09-02T18:56:44.446591Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"68ba8003ce278938fcb6a66772de8cc5","sha1":"ba16a9fe6af52a570a0bc67323a1970baa56aaf8","sha256":"8707960c638c81bfde1dee23b2fe02606f193350e2be51673dc5acd08b3e3aa3","sha512":"5904178f5b401effc0f5007bb5454703de4ee9cd81311e85af0d7ce71b5027734f7a389028cc2c15cc7fa79dc0a248df4a69ec9010bdbba3fc6bb0abbabfa9af","ssdeep":"","tlshash":"e0d097c860a62cc23f80099507af2de0c026c03670050b126cdcdc482b670b09123edc","size":229,"data":"","first_seen":"2026-03-17T06:00:28.332317Z","last_seen":"2026-09-02T02:03:26.271366Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"map[actor:server1.conn0.watcher17.process7//obj149 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:ECONNABORTED writable:true] config:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj150 class:Object extensible:true frozen:false isError:false ownPropertyLength:18 sealed:false type:object] writable:true] message:map[configurable:true enumerable:true value:Request aborted writable:true] name:map[configurable:true enumerable:true value:AxiosError writable:true] request:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj151 class:XMLHttpRequest extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true]] ownPropertiesLength:6 safeGetterValues:map[stack:map[enumerable:false getterPrototypeLevel:2 getterValue: writable:true]]] sealed:false type:object]","filename":"","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"basetructcc.cc/charting_library/charting_library.min.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:23.247Z","timestamp":1788314543247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55c4-2a6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 169\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iiVlv9gllOmuLK5%2FPA0QuvA7HQeQGtxwTI8wxaUrRbwkDnN%2FlZCBXW34gRk2IzEDd6Awa55%2BCD0rFNksjRNbjsIwwye%2FkttS8afuG0soyX4%2F9TPGvohQRRMma69F5%2Fce7Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eea7587556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":3947,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-02T02:03:26.170006Z","times_seen":1389,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/menu/getSideMenu?lang=en","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.141Z","timestamp":1788314546141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/menu/getSideMenu?lang=en HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: TUR5I9+tLAiO7Rr5zJV+w992scUX3Q3jTZSwt11qy56HT+DcQ2hXfPEgun4dRr5KU50PJAmwyPZchyomhD5ZCJfrAE/If4cb1Dj5b32Ao5cLStQHa/TIB+QaMeDGjKvS5rGcHtCa4UZLemFrpp/vd68tXHVONJPJJFapq4oGRDyB1I2PZI0NBsZTGzB6rXuvtSt+OPj4JFreSUdCg/gUuvdCw12v5tCIYu1xXKGEiBoueA7CWpYTLE955/J3Vwa3ok1HxhoFcqsMCFsNvzOioyeth9HghgMzd4cr04gJzimW1IZeekdzgtr7qNDkExEmlSWKAh9p1NVQjYIlR0YoHA==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yi42H1lqG76NM%2BtdgIxhj4qTtublOBcLE7vZUaWOZFuFO5EzXk48P5Za87C%2BXmd5AqJac%2FUrWCZLVX9GtidLezPPUN%2BP6N%2BMMNAmCtle0gbCde1efZbok8Ncq2KLubTb94z%2Beg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb6c5b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6491,"size_decoded":2176,"mime_type":"application/json","magic":"JSON text data","md5":"dea34079206d716f040c4ef34d6fa891","sha1":"56bf36b9a982b68b354eeab6add35e31f0cbe865","sha256":"668f2504f4712dfaffdf40d46aeb1d688f2ae46e187568bd84129c37b2c0cd56","sha512":"8c7ec2ba7ca2f0d53a594472886394fc650ac4fc94dbc628ba3deef664ea9c0963a77912a7d807ba48799d5e28041aa01352dbe9e080efa4441f0c58392c44b3","ssdeep":"192:qhcJzdiaAzg8/Xzb/2zKQ2zJo9zMV0zQhbz5CVazwBYzKdUbBzry3BzACaK7p:qhi8dgCbKKxJSM2Qh5CgwGKdUZryNAC/","tlshash":"92d101476020d56f2cd909ab405fbe9dd1feb31b65c04e5464ea8f2c1868c7a291f18f","first_seen":"2026-09-02T01:59:37.846337Z","last_seen":"2026-09-02T02:03:26.170991Z","times_seen":4,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.bicokt.vip/mz/ds/1f60f73c-5976-43cd-b0d5-a6a575c4a319","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:21.252Z","timestamp":1788314541252,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /mz/ds/1f60f73c-5976-43cd-b0d5-a6a575c4a319 HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://basetructcc.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 9sdXQ1HY05hktHyUtE70JA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.d2facd6b.css","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.070Z","timestamp":1788314545070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.d2facd6b.css HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vL7IPvFZ4bL9pz%2BJpkaBs35C6eD6WzTjhl1q4%2Bq%2FNM%2FE%2BnX4Gw2jiRvDc7t4zfU4QojSHbNEQ4jUSazeLsqsdV0ZkhCG%2BUhSHdn3rcP3pnkoK1UIiBiPq4hRGnARMv8Wog%3D%3D\"}]}\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a8e55d0-72\"\r\ncf-ray: a348eeb2b88e56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":837,"mime_type":"text/css","magic":"ASCII text","md5":"e9bd3e8447bf0e74ef55db1291d274b6","sha1":"404ef0c709da192f6a7560f6fca2af8d01d49cef","sha256":"d2facd6bbda868b91a744e435856bf576bb6d33a8007c244303a7803d5df81d4","sha512":"c722e9c7f23877885a85f017f68d92ef2d38e048ee2c879ba9cbc41088a0748b43244823c80c724f17d731d885943daf54a05b2f8133e4320c6486b010a186a2","ssdeep":"","tlshash":"10b09299a670df2bb59a50102649ec5c6ab562904962130a9103de2212fb9ddba908a2","first_seen":"2026-03-17T06:00:28.237547Z","last_seen":"2026-09-02T02:03:26.172215Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/usage/messager/getUsageConfig","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.669Z","timestamp":1788314548669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/usage/messager/getUsageConfig HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 147\r\nOrigin: https://msg.bthdya.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":147,"data":"{\"appId\":\"SjDcQcOZ\",\"language\":\"en_US\",\"userId\":\"\",\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\",\"deviceId\":\"f58d2670994742e38e54734db00517e7\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://msg.bthdya.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ld92ae8EnrQenPiLzww5XFWycKb8bmcXU4xlnfEW5PK%2BjA%2BbglVUHpE%2FLDS2z5zZfBhOPU7%2BjIbJt4UWdkm7vV1n3PKandwWcd1nyADMjjvnjmUEaEv%2F0%2B6xHCGsLnQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec9284ab4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":888,"mime_type":"application/json","magic":"JSON text data","md5":"6bd9b354eaf834dfac1a0afb25f8e80c","sha1":"a6f41b1af721b1dfe686ddf12b0658623d2e7c9d","sha256":"2e9cea3fff04b3b9d311ac2b1e1819b41db1de0d9996fc87c0c2a47dd64fd233","sha512":"0f89574039915eaf6bd8a0c72806e3d7077b6d75ba79fcbcb445fcb94118b9b23bed99e6dab8835a788e3ed44b8a1fabc29c5c3c80e66bd9ffdf7f9ef4dccafe","ssdeep":"","tlshash":"de900411550d5cd31c1134cc4d0c474010d430404150c710cd4c5114c7050757441530","first_seen":"2024-08-20T00:13:36.67694Z","last_seen":"2026-09-02T02:03:26.172877Z","times_seen":15,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/BTC.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.989Z","timestamp":1788314546989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/BTC.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12805\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B45A61C6313582E3C8\r\nAccept-Ranges: bytes\r\nETag: \"6AFC9114C95331695B322ED68675C134\"\r\nLast-Modified: Sat, 03 Jan 2026 19:56:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9160531501292360676\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQvAEYgYCA5KreldwZIiAwNTRlNDJiMTQ4Zjc0NDdmODNjMDRkYzljNjJlZDQ4NQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: avyRFMlTMWlbMi7WhnXBNA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12805,"size_decoded":13468,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 128x128, components 3","md5":"6afc9114c95331695b322ed68675c134","sha1":"1617a63f68242b06b781bfe82304a4e7bed8f658","sha256":"54797af46a10616aa870830d0ef25b9699b0440329317c089a1add3b23c4e0b4","sha512":"5cca47430aa6e2437d24b762fa8b34de0fc38b329ea196a0dcb75bd3bd5515eb8fe0c986be6430aaacc79982e916a14b9ea32d727b8f10ca39e865db20c3a19e","ssdeep":"192:wctkfsED3tzbNQE6dQ8v9zQLkhugDyb1y6VMmKoIbKabWADgTYNLrWnX8u853J:w9dhNQjdQw0IEZbwZmKoSip2K8uYJ","tlshash":"7342d05dc345eb48be4f31f7856b88f7779d0a50a43828d89631429fe54c9ca34e928a","first_seen":"2026-03-17T06:00:28.225188Z","last_seen":"2026-09-02T02:03:26.173565Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":1187,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/ETH.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.991Z","timestamp":1788314546991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/ETH.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4C961DA3631934457\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Sun, 04 Jan 2026 20:32:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQvAEYgYDAwoPsqtwZIiAzZDljN2Y1NTBmMDA0MjdhYjBhZjZlYTg5Y2Y3OGJiZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":1761,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-09-02T22:31:32.606832Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":1366,"timings":{"blocked":1106,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/ed469eeeddf2465fac2489ed1dbea101.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.048Z","timestamp":1788314546048,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/ed469eeeddf2465fac2489ed1dbea101.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2954\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4F4F6753733D852F3\r\nAccept-Ranges: bytes\r\nETag: \"401A6C76BD791A5AD4F6BBA1ACC1E525\"\r\nLast-Modified: Thu, 30 Oct 2025 11:06:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4223876245091296045\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYCAqJqY09EZIiA2MzIzMzU2ZDZmMzY0MGM5ODViNGVhNWU2OWI0NWY5ZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QBpsdr15GlrU9ruhrMHlJQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2954,"size_decoded":3616,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 456x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"401a6c76bd791a5ad4f6bba1acc1e525","sha1":"a449f06e9e1c0d5bdf0238d21ad986d43839eb81","sha256":"d8bee37da18f76efe1244268a9eca25f216af57d768f1845021720f71a60737f","sha512":"7bd16b74c5dbd617ff77277b5faa7ee033ac6f08c061d0d9fde1d4d380e44b0788f4cea07a607b8603cff7305316c04c85d975406837e5ee6ba5a2f3037221ae","ssdeep":"","tlshash":"0e514a6325a1875db4c9a43352da5957fd81edd75a402330ec2203a2af91c0bff60fe8","first_seen":"2026-03-17T06:00:28.230435Z","last_seen":"2026-09-02T02:03:26.17489Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":2123,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/ossfile/bytrack/audio/new_msg.wav","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.232Z","timestamp":1788314546232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /ossfile/bytrack/audio/new_msg.wav HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 230044\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6A9783B2B45D0C33325BE690\r\ncontent-range: bytes 0-230043/230044\r\naccept-ranges: bytes\r\netag: \"67CED818B33C6263EE0495B04691362E\"\r\nlast-modified: Thu, 11 Jan 2024 09:02:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13303522232220941762\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: null\r\ncontent-md5: Z87YGLM8YmPuBJWwRpE2Lg==\r\nx-oss-server-time: 4\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BfzmFfkvYZ11qqnt7UKi%2FyKdDe3XYIH3520ShOPufl8EFQtdwbrMWzTA4%2Fv46jjGWybKOqoILd8X5Y5FA%2FmA8%2BpbITw5RTdGY3u5VQYAtJFyaZb6%2BNZIHzjobfEKG8%3D\"}]}\r\ncf-ray: a348eeb9fbf9b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":216417,"size_decoded":217518,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"87027e4fc95773f492e0c265a158d089","sha1":"34b63fd17538c7b5f7393783de8ab155f147b74f","sha256":"e6f615be76f02cc19c8fb05405b298c9822c54eda271ed2b3715583f47a9ce9e","sha512":"c8cd5dd3ac30d999410c2c48c9bf489f2bb2cc16a0b7313cd3dcf981c8e9ba7434edff785b9ae7b45f56f1b54e796370973036dc89042f5392ef52c907f15df6","ssdeep":"6144:T3eiGzO2QTUiNB+MfuALkKdVPbosjDi0VVLdXQ/ysR:6iGnQTUiNduALk8VjosDi0fVQ/f","tlshash":"d724aeb3f0839a41dbc38776da92aa0508717c1dfda9161f3488bf1896f378077653a9","first_seen":"2026-09-02T02:03:26.175537Z","last_seen":"2026-09-02T02:03:26.175537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.802Z","timestamp":1788314546802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,content-type,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Ame5wNALepC6dC4oI05UVYlZYHEs507WZsePzWIgle5vr4f9YuMV6CH5KaEnlhFsMKjHd2UC34XuUgXBjwFFWcGXWM18xykrjTlE4st3Mf2DmIvWC6kXbcj7JO64gI%3D\"}]}\r\ncf-ray: a348eebd8c3856cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":606,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/announcement/list","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.121Z","timestamp":1788314546121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/announcement/list HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: XVgQbk8soKoJr/1AE2FSrFsSY4IIS4wO4Zgokgo1VqunYbdMDaOeD/OYsOpyaKxA05mrdJH+Qj/9H1ryJJ9V0hj7KV6szL3HPBQOuvEz/9+7si6vnHRAV5QhKTytRdv/kYpQ8PHCbYhepT3jmNC7u/fHloa7OPn4i+3kOEqkPlpEKlSaZDrzVi5f2z6WKBltETy/39C37PEVn+CycpWpMZGT6j8Knh6x3GOI+7IqWE5FEt+AOoPgSVR6qC2wEc0FyAQDD8G6XHOLma51qxMHy3hbTBmiT2MRUJfM6dZkK2sD1X3Jju5TDzJvQF4tf+/k3GmEd+JcxpPXby4Mn+geZg==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkHuFwNwGDHlVlGBJ7SWJ1iV4K8DyRHtxbLAOxS34e03Ak8MOEmdufjFnZ7DBRz85y9ufRS9j1ttNCAG2OYIkdGXP0WenG7rXPeeC25FZ%2Bd67uEDygoqvtwYCj%2BLcbsx%2BoUWbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb7c5d56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":927,"mime_type":"application/json","magic":"JSON text data","md5":"e9a8c052297c17c7ce7760a897644239","sha1":"b3378932ab2cc305b5cd3162b5ac98f51d6e7e3b","sha256":"0bf89b46d1f143c5d94c7541a0aad3401a462c99a4abc2ef7b3fafd4d6a66c2b","sha512":"0e58f762c7c7aa2ee8389660d02bbb799020e10984c77f1783e57726b10e4513ff16548a9074e4916a86e5a6dc37ba6355daea412d9d1e92468b06b04167fa04","ssdeep":"","tlshash":"669002511c0aa5c26403418e81068d48107434911a204619685ed131eb1c6713642854","first_seen":"2026-03-17T06:00:28.254472Z","last_seen":"2026-09-02T02:03:26.176926Z","times_seen":12,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.5e982a75.css","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:19.460Z","timestamp":1788314539460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.5e982a75.css HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-66851\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 165\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSHJ4zwevSDxGpkNoBunSHydlMRVfgQ%2FtquC9VJ4IUuAN0zrfBhJZkEsk2Nsd5afSAbKVauWBiZac2zPTMePCl771FJ%2FFZBkqtlSZ3zyYOKjQkn5%2BVldhjCI7y0aXcV0OA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a348ee8f982e56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419921,"size_decoded":62596,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1c4a851d05d161e2385d90d064f00ac7","sha1":"e848144d29c4881365b7a9ff0d3fb1fd35a16750","sha256":"5e982a7507ce35c9d443a15effe7bedcac9b9dee7b7727e1f574f2e8372cc4d4","sha512":"42d9987e7f70b97fb5675a35f84f6b49729292dd9b340f5c70009fc619db7b469cb54ee36051d4ddcba3739209965391f784495332ecb7a92d010e8e21b9e665","ssdeep":"6144:aSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rd:24g4","tlshash":"2994e755e713153b2827d63d79c0e9986f14df92d9228bb6fb40a40894c7de212e3e2f","first_seen":"2026-09-02T01:59:37.895679Z","last_seen":"2026-09-02T02:03:26.177611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/space.185eb96a.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.026Z","timestamp":1788314546026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/space.185eb96a.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-b0e7e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BETW4kooGn50eAutaV6RskLoiymLA0OH27mPZto4s8LVuBvzXn6wNk6D0Lm8ZfXuTqRCn1Cf%2Bnl9ShpR9s73B1zg2luPYecfgu785KhFHXNzU%2FOvchEyCeRMT8e2d7M0Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a348eeb8a8a256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724606,"size_decoded":725594,"mime_type":"image/png","magic":"PNG image data, 1920 x 284, 8-bit/color RGBA, non-interlaced","md5":"13225d11457b424cf9d762fc5e81e018","sha1":"3be8b044c1dce1ed6e7330a956dd2748f48ac321","sha256":"185eb96a88d79b2a5383b18ce88eafbfee724c58054d5cbf92b98224a13eedf1","sha512":"badbae6a8ba5b75c6099f823841503960e952c23be8540cdecb00e5ab38485fd91f1b1a6da2c500279602dee7a8dbe3b264a26e75b0b5a77db4cae50b271f975","ssdeep":"12288:K77HEQ0SLXKvjQNalD9rVFWlg2fTE8QvXTF7MGh9jFRfM3emI0ndYbFqiN:K3EQVCQNalvFUg2fTE8oXTF9XRFmPndG","tlshash":"24f4235c1fce2be1c26d22b07ae52485b8b603405d2e853905af3db9c48e54edd2bb1f","first_seen":"2026-03-17T06:00:28.280489Z","last_seen":"2026-09-02T02:03:26.178607Z","times_seen":11,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/ALLO.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.000Z","timestamp":1788314547000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/ALLO.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 9682\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B470C1143530DC4711\r\nAccept-Ranges: bytes\r\nETag: \"5068B882D17539D338746F5122F091B8\"\r\nLast-Modified: Sat, 03 Jan 2026 19:24:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2272122837552185140\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQvAEYgYDAk7GjldwZIiAxMzNlNmViMDM5NDA0MjExYjM0NTMxZGNiMDhmOGMyMw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UGi4gtF1OdM4dG9RIvCRuA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9682,"size_decoded":10344,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 128x128, components 3","md5":"5068b882d17539d338746f5122f091b8","sha1":"1b6530d541bc9b6f182524f9b68b93b08268d2c6","sha256":"9853084ee2b28bf7b06bb22f368c6c908159f80754e72e12b765c9ca6dcf7bfd","sha512":"86ca12a43823e1d966c23598e3893a03804af85257076ed053db31d6f8f1d651996bb250e6506bd050f71db46147b54ed0e66e86b04e2ff2cf37fbc005151bbe","ssdeep":"192:wpQPIm53PqaN7iJlNrfiGkOwuEci4xrHGkwgHN/yDsl4S4/u:wpQPIm5/fMffkuEci4xrHFfNaol4Y","tlshash":"7412aed7dff62377ae2806a150db5da319bb3f5996c5dc0822b6000bf65c3e6944a38c","first_seen":"2026-03-17T06:00:28.262203Z","last_seen":"2026-09-02T02:03:26.179247Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":1373,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/chunk-vendors.fbeada00.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:27.999Z","timestamp":1788314547999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /core/v1.21.1/js/chunk-vendors.fbeada00.js HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 07:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5ERaGZK%2FkBRLdpgGQzsFAFO%2BrzdHHuHUjZsIEniZ8gjyK6zrRTgB8Q4qN9sF13I5OfNCO96MrOKb07QTcLpaHXY3j98Yfzirzpl450JgLzSyaPyLYFmdpwVDLwv0g4%3D\"}]}\r\nage: 243\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6954d562-cfa61\"\r\ncontent-encoding: br\r\ncf-ray: a348eec4ff06b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":850529,"size_decoded":248202,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35206)","md5":"91c836886362685dd09820d1020f4a1a","sha1":"93865c4bcbd79d4ba7218fe36ef862dff0638872","sha256":"f9767b6b01cc38519369b38ee65dbafeb8799bea532dd19fe9828b31dd31695e","sha512":"bb37e2ad55e99b49694921edecce8d7a6e54ca9c341774fd8f98cfc692f688a188c0ea0690f07670efce727a72d9f444070d886319eaff94081128b34a2fafa3","ssdeep":"24576:JT4hu7iMWZ8wh1nAukdDO3Xyr5Ir5eR0dTzthM:R4giMeHM","tlshash":"ef052b8eb1c17025136354b141ef050af23a9955b40a48dcf261f4da6fbea4e626bf3f","first_seen":"2025-05-30T06:18:47.007908Z","last_seen":"2026-09-02T02:03:26.179894Z","times_seen":17,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/announcement/popup","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.135Z","timestamp":1788314546135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/announcement/popup HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: HHNYxTX0hwRmNN2PIXajnjmQkR9uDRmWbI5K8mDlY+XQL1El269UcDp/2NAbKqGRwPT4yeIWE4kuVFJRcRLVdgoqXSFN/NzkR/jUIAbniOozk0Jw9cFIcr4c+31nAkDphC3Hj3JqebdHm0PpeGxgGcGsec/Fdv2zzB0xWEr0F1S9IvGARncvBMjv9uS8scT+yNKd51WW8CVRjoy9Gd5cgZeS1UT0BP4SZ28CAj/cNQl/JB0VT6Ix8pxGMqst8EeZ9ZY3yIMx9kCP2F/qv05SytCU5oZDhG+yOnYZ6EJPf86alTxu8CdqJrxaYM3OUgsPlKbxcvMD8BvhAu4/r05sYQ==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piWG5xUzioE7LMp4liELN9CVD8hkef%2FfLcAFdcZHyrjJWTTSOdnDiunWHzfSykUTe6X6FQFj36NRVfCXMiFSgr3TQCWyRsSqI516EvJpovOVsFhi6t8SrL8sE1%2Fm7g5eVo2KoQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb9c6256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":925,"mime_type":"application/json","magic":"JSON text data","md5":"e9a8c052297c17c7ce7760a897644239","sha1":"b3378932ab2cc305b5cd3162b5ac98f51d6e7e3b","sha256":"0bf89b46d1f143c5d94c7541a0aad3401a462c99a4abc2ef7b3fafd4d6a66c2b","sha512":"0e58f762c7c7aa2ee8389660d02bbb799020e10984c77f1783e57726b10e4513ff16548a9074e4916a86e5a6dc37ba6355daea412d9d1e92468b06b04167fa04","ssdeep":"","tlshash":"669002511c0aa5c26403418e81068d48107434911a204619685ed131eb1c6713642854","first_seen":"2026-03-17T06:00:28.254472Z","last_seen":"2026-09-02T02:03:26.176926Z","times_seen":12,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/remind/getPopUpMessage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.639Z","timestamp":1788314547639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/remind/getPopUpMessage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,content-type,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEolX4N%2F7xfxXMn8H88A5xBCyhLUHInLjpIV8UltnTcHaM%2B0yBxjRoXwdcA9SCx7lPrOUVZ73t5nu0RmLKztzloi2jq6lLAAJXgBz%2Bjd8yoJ8XrPG5hAziYw2KtqhgM%3D\"}]}\r\ncf-ray: a348eec2bde956cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":612,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/chat/api/chatList","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.671Z","timestamp":1788314548671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/chat/api/chatList HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 231\r\nOrigin: https://msg.bthdya.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":231,"data":"{\"userInfo\":{\"userId\":\"\",\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\"},\"size\":1,\"userId\":\"\",\"appId\":\"SjDcQcOZ\",\"language\":\"en_US\",\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\",\"deviceId\":\"f58d2670994742e38e54734db00517e7\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://msg.bthdya.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srSLdu4hjh9ym9i1ikiIgJJENbux4ajZEwdPFAJ2zinZm84zgWd1ry78L0ckFBrgNhpJL0Xq%2F%2FGASF%2BpaGQYO%2FEmtDYfdjySP7Z%2FYlfB7g2LOt5DU1g21UEH2BQ4Ir0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec9284db4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":720,"mime_type":"application/json","magic":"JSON text data","md5":"efbfc02acdf7f246c33774e026de0a4f","sha1":"55ecacc7b060c6b257e8343d9d16599a2db7dee7","sha256":"99e80b1c4a72644b99bfb897569e0aa12ba06b8a02820038e799b0fb4901877e","sha512":"86f50955fa94359fbfe99d1ceb9a9662e3ec7e2876d3c1c1161ce4735807c2e6c0f686fd2cdcbd4d58f68dbd7b51020259b22691df12bf899c098f1fd446b199","ssdeep":"","tlshash":"96a00212550d49db5da5b4c81a19d70097f620464190da14cd8cd67c8b1f1aa74c1b24","first_seen":"2025-04-20T01:44:49.437101Z","last_seen":"2026-09-02T02:03:26.180593Z","times_seen":17,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border.3a893777.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.084Z","timestamp":1788314546084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border.3a893777.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-85e0\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0xGGzTXi33%2FWjpU2Ll5T1U3lWfmlByDjumnl63CnMY0dw9Ti5PkqTYb%2BV8VzG%2BMr6VRr8xu5mxht%2BVpf9kdJ0h6q8MKLS9pVK9EvjkcVxR%2BnF8qLisyHm2Ej81IbM2Jmw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908aa56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34272,"size_decoded":35029,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"e3ae59926ff0e6d1326e06bef98a7d79","sha1":"356e72202e349b9a17e33ad3b14f2b76dadfd724","sha256":"3a893777e4bf72c396628ed62147a74105a5fdf972d81d142bfe4ff92775ed18","sha512":"f7343f42a65e8ce04bc4dec6534a705724d27a0f4d3ab47a7181c830fdd8fc5b8b53d976e3c835c7ddb6cf83a00aa3ae2b71ff93938d89a87698d499cadb7b03","ssdeep":"768:e+0P0bBP8Mka/inf2BjcGtFS2e3A4IoTIlte4tzRUrnD7HfSHDL3Hzs:e5P0bBP8k/62BjBPne3AdOAdtarD7/SI","tlshash":"b5f2f15b2a66d76f3d96c55ab4b0803e728daa51ec72736841f302213498219cd3ebbd","first_seen":"2026-03-17T06:00:28.236593Z","last_seen":"2026-09-02T02:03:26.181262Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/ossfile/bytrack/audio/new_msg.wav","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:23.077Z","timestamp":1788314543077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /ossfile/bytrack/audio/new_msg.wav HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 230044\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6A9783AF4A69423333E19C06\r\ncontent-range: bytes 0-230043/230044\r\naccept-ranges: bytes\r\netag: \"67CED818B33C6263EE0495B04691362E\"\r\nlast-modified: Thu, 11 Jan 2024 09:02:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13303522232220941762\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: null\r\ncontent-md5: Z87YGLM8YmPuBJWwRpE2Lg==\r\nx-oss-server-time: 11\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CaQJGinkvmxXslK4eMFIuSxk3Iipwx6XnEzntOcD8RmIVRDJf5n%2FuEYgUBiQDQCm8coBpGahTRX3uEzfq4NvEi8ZozlifvFCkNPqRqW6lb98keTQKQ7o7JtAKbD72tM%3D\"}]}\r\ncf-ray: a348eea64e03b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13736,"size_decoded":14828,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"1cfb768e88a31fa3041f657650abf7c7","sha1":"e5e41ec605ec88819557797b938d2e4549fcd4c3","sha256":"22f2b8c118d2bd93a5db7c152f2fa69774a08ccc5125e2f292388e76329db2fe","sha512":"f57532092be441b4ae3928d9b4e23057fc4f401e4d3a177b27324e8bcf9ff4e07cc87cd0b4599fce775ef7c43f8681aebb0eac3f6a67c59db15a19d55728fa26","ssdeep":"12:hUTVnFF1HNyS/JdCONCeNlF1HN531yyH1yaY+Vlfh1Wf1Z7DmflMDvjaIJ0llUJs:hUcfrHn3mqf1hDmNMDvmIJ0sJJm0m+Zm","tlshash":"41529e93b1419d06d80e2f3a0e62ebaa46367e25bf0ba3573984775e5e732c04b50682","first_seen":"2026-08-09T21:36:14.87691Z","last_seen":"2026-09-02T02:03:26.18216Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1636,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":564,"receive":1059,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.b080eee4.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.061Z","timestamp":1788314545061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.b080eee4.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ip%2B1y7rYgYz6iqdIU4f0UZOccG0cd3%2Fh8aS4T2yEw3sLtyvdtcyGpk6l29pSTckaw07H4TqPCnZcfvF6KVJRHSlw4iKTiK8HJ8tn0TdBEdofTEsknJeiKZiHkrIixBwlWA%3D%3D\"}]}\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a8e55d0-218\"\r\ncf-ray: a348eeb2a88d56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536,"size_decoded":1118,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (535)","md5":"47dfddac9d26baaee92a4614885360c5","sha1":"734bc2143793e6176b85cac6928a0c6949e7aa51","sha256":"900a4ec6243dd99e89604e135d8f02497da486e02c6b36840200dbb3526da997","sha512":"776e0b30499e07361d69024bef3f6a1765560d21182c5528fe13b55b53f9eae0cc5ac1d0d668940a2e1b64b286d1b76233e22d56e056f98a99b7c4ab611e2359","ssdeep":"","tlshash":"caf00559f9018f735bdb1c4c55803449170a0f5b79303af3f5925039b5bb522f60e756","first_seen":"2026-09-02T01:59:37.850763Z","last_seen":"2026-09-02T02:03:26.182799Z","times_seen":4,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/d0e54ee5799b444987f027cd23e8e1cf.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.034Z","timestamp":1788314546034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/d0e54ee5799b444987f027cd23e8e1cf.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8234\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B3C961DA36314F4357\r\nAccept-Ranges: bytes\r\nETag: \"B18C40FEE28311CB807277F76B523A9D\"\r\nLast-Modified: Thu, 30 Oct 2025 11:06:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2201622488444272914\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDAruOY09EZIiA2YWMwOTk3OTc2MDM0MjYxOWZkZDVhZWY1ZDIwZTIwYQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: sYxA/uKDEcuAcnf3a1I6nQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8234,"size_decoded":8896,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b18c40fee28311cb807277f76b523a9d","sha1":"319967d99fe59e3aed887c9dfc666aff3ec8de65","sha256":"11579224d2b9bb8dcec04160c90c3db27cb4708add5a02b13443e2fa27b9c739","sha512":"78947810317e3c7602c017591de185b3031a0cba118e9a067d40e9caa40b8fd6f6ed64c3bc50305502e054ac91dd3cc7af94723cfce44bee5bd0b5593f861c55","ssdeep":"192:3jOQ8I/700lQj3BYrfGhc3QLWcTaB0efXhKO4:yQBT00KjxYcraWepKv","tlshash":"5902af872f047f67f773b5ee2dcbab07efb1b11688482c6656c5b05174f4a099d0290a","first_seen":"2026-03-17T06:00:28.229424Z","last_seen":"2026-09-02T02:03:26.183785Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":257,"send":0,"wait":259,"receive":0,"ssl":770},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/OverlayBlur.1644f109.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.081Z","timestamp":1788314546081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/OverlayBlur.1644f109.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-234f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jdoo5SicF2wZmFeuLxejhPS69%2Bm93Bm0lRVocejnZIq8OjDXr76tHSXykBRs0odph6ODPuwkJYRMXAbrXSCjjl4MfUcCJCVR9bSbz7uGMWBxGdn67D716hutHGX8k3N4AA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908a856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9039,"size_decoded":9812,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b06ac6b414a20c03380a470e948fa2e6","sha1":"f255f087663c68f078920894bd5a5514a85cc6c1","sha256":"1644f1097631b3d2e525e54436c02066a86a7491026830cf42b7e76bd1c6dbdb","sha512":"58ea95eafe60fea25c8a03a35a7f8ee3a6fee232ebb02cba82b4b264928dd7d08c73090bec1e362e3f5e560413d6e6f23bd3f6f977355006e73dd5df4db217c4","ssdeep":"192:WeT6k1hK1qwSFlZQTeDCVmwXrp2Xej82Qf0p5HNwVONERn6M1wb:zsMwSFfQTeDCVRFCa82QkRaV58M1wb","tlshash":"d312aff4cbe4aa84d03ea11345d900e588e4db36853386907f96244b169d3e72ff43ba","first_seen":"2026-03-17T06:00:28.26683Z","last_seen":"2026-09-02T02:03:26.184511Z","times_seen":11,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/cBh9WJWO6vZzY9MJDui06w59jKI=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2288301283-adebd879fe8447acbb478aa5101b4c2d.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.616Z","timestamp":1788314547616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/cBh9WJWO6vZzY9MJDui06w59jKI=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2288301283-adebd879fe8447acbb478aa5101b4c2d.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 139076\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2439497\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"ac78b6c52b1bcc526fdf453007093862\"\r\nexpires: Wed, 05 Aug 2026 00:24:09 GMT\r\nlast-modified: Mon, 03 Aug 2026 21:00:32 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 8OfCM6kU8sRYDMfJVdXyW54eJR8l1tVcXn41TgiTqFHygag4DwRFt6gdrO5gMP9j2BcM3u4ipv/e2yEuULqU1GOwP6fEvzCw\r\nx-amz-request-id: MWZ22R8C3D57N43H\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=qU3m5EGan0oPRsfeUNzG0Ao7sNiwH6UW8.kg6kZCAZg-1788314547.6376405-1.0.1.1-Y.nggyFr1H5Na3lDR83qusmWAYNQkcyQZr2pooDc_2YRC7Nf_6qej_02uHAUdj.IJQ9wmGPpGI01tmFJbhfkdOii2fJeBSTJempj4UGbtD.vXTai45oa62ZINat9wOM4; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd0d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"qU3m5EGan0oPRsfeUNzG0Ao7sNiwH6UW8.kg6kZCAZg-1788314547.6376405-1.0.1.1-Y.nggyFr1H5Na3lDR83qusmWAYNQkcyQZr2pooDc_2YRC7Nf_6qej_02uHAUdj.IJQ9wmGPpGI01tmFJbhfkdOii2fJeBSTJempj4UGbtD.vXTai45oa62ZINat9wOM4","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=qU3m5EGan0oPRsfeUNzG0Ao7sNiwH6UW8.kg6kZCAZg-1788314547.6376405-1.0.1.1-Y.nggyFr1H5Na3lDR83qusmWAYNQkcyQZr2pooDc_2YRC7Nf_6qej_02uHAUdj.IJQ9wmGPpGI01tmFJbhfkdOii2fJeBSTJempj4UGbtD.vXTai45oa62ZINat9wOM4; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":139076,"size_decoded":140367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac78b6c52b1bcc526fdf453007093862","sha1":"ee958603e1b0d019072f833290e84fa367752d84","sha256":"3e8ac309ecbfdcac3c756e7fefab287eb971de8e7aed568181b8e42c28890938","sha512":"b78f19434565047936977cb932ba1794ca7d77152a1c36f672748979b48a06d4b2e21b1cb75819031f75ef75af79544adc9d760bad6910c9d85f68368a5cc7cc","ssdeep":"3072:tGD86AJsdPW35nTrLhxQFufGU3pS0B/rVs28rZE2Dna1ZCl3KRMDF:t93sde35TfQFeGU3pSE/rV0rZE2W18wE","tlshash":"31d312c7392f67028a7afbdc3b223c9563d3d1ea2064e016dc8c499c901a5f776b19c6","first_seen":"2026-08-09T21:36:39.611589Z","last_seen":"2026-09-02T02:03:26.185403Z","times_seen":5,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.620Z","timestamp":1788314547620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 20\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"appId\":\"SjDcQcOZ\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5%2FXGVjngNYxxP0DxZKTCcESGZ4nlfWND4QRF2NfnKDMw9Yyt%2B4r2%2BQoNWkC6%2B64ufz7%2FyPCza3PQLBmrgnbgSDQ96766fj%2FOG3SwBUKgUSfjOtoXwwVuzbE9eukbAU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec46e5d56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":708,"mime_type":"application/json","magic":"JSON text data","md5":"88cad4f49fd0a4ec576cda7a5c6704d2","sha1":"d94538417181113fe41fcca1d6f73ddee114c43c","sha256":"6f83aa52d760ef4983b3828bfeb5d25b9846fc940ee74730089bf32a00dfaf91","sha512":"ce0d67230966d93b4b153bc3eba10b4d4a50e2197097ebe9962d03f13cd40e198ed98df08ada52def0237be92a74799ca0329de5aa3599d63543a7cec5da3ca3","ssdeep":"","tlshash":"cb900211950d58e36d1124c4190c070010e821804140ca00cd4c6254c9090666041520","first_seen":"2023-12-02T21:57:17Z","last_seen":"2026-09-02T02:03:26.186406Z","times_seen":17,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T02:02:18.819Z","timestamp":1788314538819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:19 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9grNNICkvDZF76IHSgrdHXSFrW3J%2FgLCLTdLt7xFpavz5u3b2syR8lo6gfCaSu6RfskXJq%2FOoVYQDH5t7DAOEHMUFmStFEek6Gl%2FCC1r%2BFtdMTpFIfqeut36lBauwPK2ew%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a348ee8bb82656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4204,"size_decoded":2215,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2170)","md5":"c7416e4b9e9722885ee232d3937eac76","sha1":"1b9ceda317983ad762c04cfacbf0cb675dcf627d","sha256":"b35d37af4ba7ee54b28ccc387e6c4fe5a74eeffdb1714b8e0ceba62168ca42d2","sha512":"ead72d0eb0e2191c7210f927affdcca3d85f50cc079ea39abbc5cf4da00d04f0ad3cc5e02dd62e09efdd5cf20b65992121ff56f9728e2f7adcf010570b73028f","ssdeep":"96:/czDuso/ocgJyBe/UVK2mUsGKdilwGDKADq2Tu:mwgwc2nfOqbOAm2y","tlshash":"9481946609f2c85413a3513ddfefb206eb32408756064c217dcd69989fd4be880c77aa","first_seen":"2026-09-02T01:59:37.839044Z","last_seen":"2026-09-02T02:03:26.187217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/charting_library/charting_library.min.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:19.456Z","timestamp":1788314539456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55c4-2a6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 165\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyDgs%2FyNB7PTWFscvgwzv11tAr5B8SFFCaETfaJZ2PS5C3ZccCEjDz7ac33tyIieK3pOwCYUOnxyrY%2BpByE0fzFFYpF7ECzejDx1jiiQobGbhUBIMuCSiiqHGGJHa94BsQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348ee8f982c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3939,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-02T02:03:26.170006Z","times_seen":1389,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/resource/fonts/PINGFANG-SC-HEAVY.ttf","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.120Z","timestamp":1788314546120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-HEAVY.ttf HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\netag: \"6a8e55c4-a99924\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 166\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lu0wcD1%2BEXqmzWODgTmR0Um%2F5FiQDplCou%2BI7jXvW9oBjWpPkC2XC0MpQG%2FWR33AVctcXZD0fL03W73s0jlq%2FzcOTq80Ttk3Q6oQ9i3II8MTbFqoyU%2BW%2BoJwC8lvORCQiw%3D%3D\"}]}\r\ncf-ray: a348eeb938b456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11114788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11114788,"size_decoded":11115564,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-09-02T02:03:26.18783Z","times_seen":88,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.627Z","timestamp":1788314547627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,content-type,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrStdHzN%2B1Ll1XUw6zKfD7fiWBo%2B2RF7Pvtx%2FwbvaPxSf27i6TJmnpYIsZRpynTI1TGvbXSR8nQuROZtALrnkqZPQNoMx31R83%2FOfct5I9z7WOAXZvv8kuMnuLtXKmc%3D\"}]}\r\ncf-ray: a348eec2ade556cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":614,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/dbf34674722b482a92b8160a9047cd7a.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.039Z","timestamp":1788314546039,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/dbf34674722b482a92b8160a9047cd7a.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2662\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B35A61C6313540E2C8\r\nAccept-Ranges: bytes\r\nETag: \"8A546076171E8C2889F8001A479AF331\"\r\nLast-Modified: Thu, 30 Oct 2025 11:07:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11797396594312818960\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYCA2sOa09EZIiBkMjhlZDZlZjYyYjY0ZmQ4YTZkYTc0MmNhYWM1NTFhMA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ilRgdhcejCiJ+AAaR5rzMQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2662,"size_decoded":3325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a546076171e8c2889f8001a479af331","sha1":"0971e2c2b771fc7c7ba52ad12af905b066957e0c","sha256":"a43f5da3b6d97ead9e787f88a13c13f7477608cd771c105c6b7234c5b4a6b9d0","sha512":"7d7c89fa4858189a99388c0bcdcbda335df1300fbb10262b2f74f46abdbd355457f617833cb3557a58552290e38d3884c22beec35bc80e465f2cbc00de77826e","ssdeep":"","tlshash":"c7513bd53583db88c276b9f3624a967234e8c494b23094ca28ae07293550707f8c0ec5","first_seen":"2026-03-17T06:00:28.246489Z","last_seen":"2026-09-02T02:03:26.188496Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":-1,"dns":1,"connect":266,"send":0,"wait":269,"receive":0,"ssl":795},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(5).1e9ed01b.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.089Z","timestamp":1788314546089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(5).1e9ed01b.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-7cbd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLtYwJj71Sr4uowR4YgkIhaUcfCIo8B2umNCEMVfLAeuKesI12mtUArmUSrBDT7slXFBYK4IK9N5ecjEnzSilI1wubtmua98FFQ01oKVfbLR6Yy6xZZPBZdE4pjcm%2FG4Sg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908af56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31933,"size_decoded":32706,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"c19d7a650ec1c38bacbac30720410873","sha1":"caeb890abb4d40c4da85e958eac2c9f0eab6f15c","sha256":"1e9ed01b30a6f5a11da97d327368f9462664ec071b3295971a1a4c60c69198c4","sha512":"176063c077e2b33012bc33e678b70aadcd7a5ee053f1d345fcfa523d7d0d446730b2e6a0d8ac1aac733ada5ee7557145aac5f04786d2e71f9cd546d96ddfcc4b","ssdeep":"768:1e4ho5aoW/4Zla+2E7oK9M5bQ94/yo6lbczQZdl8T/M3:1Le5Lg4Zla+j7oK9MS9Bo6lp+/M3","tlshash":"b6e2e0a82e490b79730f5743b81909a344de4717b1e86fe09f795fb58044498e8e4a3a","first_seen":"2026-03-17T06:00:28.29085Z","last_seen":"2026-09-02T02:03:26.189406Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.3a84cdc7.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:19.458Z","timestamp":1788314539458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.3a84cdc7.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-82cebc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 165\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jl7mBMGu7XJni8TzlG7DHeMH7sowaCfaLpJeWdfwO404a1s9JyxE4kOCjIK1hll61UL9LyyL574pw71RneDJG7%2BJIOnrLWRWS4R5lRDx3JKbLr6NcVxqo9URPMhuJ5jb5g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348ee8f982d56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8572604,"size_decoded":3942791,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67fa039d85ba3174767f77fe32565e57","sha1":"b06d057e1bfde05e9ec7751f4fea3f25b13d894d","sha256":"955fed65f3e52cc3a528c5252c50a3acad5116e74541b885c7654c79a3d7e141","sha512":"59a7480d3f38d3e7d6454e7bace0b6d0717c00543183762cc9fcd2523a64b8de9e76507fb74d5800b629ff147120c4b7d1955324c7f7c3f7410e5d937993d5f3","ssdeep":"24576:7hBT6B0211OQGRAN9ioPJumCcg6eSF6fVY3PX+uFETn0o/F:1Bmu2DOQGRAN9ioPJumCcg6eSF+Y3PXa","tlshash":"a1254b61b194f82207fb94d780af0411e269135d605ad4e0f5baccae325ee44a2eff7d","first_seen":"2026-09-02T01:59:37.840222Z","last_seen":"2026-09-02T02:03:26.190039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.800Z","timestamp":1788314546800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 20\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"appId\":\"SjDcQcOZ\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKM0lMQ%2BgxdHqEgtFIL%2B6Qjr814NcTk03lR0%2BMBX0RTlZNEb4ZBHMSPKSn%2FmvZQQs%2FzmgqKPiMCXeF%2FDjhTcpLywd4VlfjJ3eLA6EaYT3gY7PtQ1aWpM6hkOsGPxFDw%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eebf5cdf56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":708,"mime_type":"application/json","magic":"JSON text data","md5":"88cad4f49fd0a4ec576cda7a5c6704d2","sha1":"d94538417181113fe41fcca1d6f73ddee114c43c","sha256":"6f83aa52d760ef4983b3828bfeb5d25b9846fc940ee74730089bf32a00dfaf91","sha512":"ce0d67230966d93b4b153bc3eba10b4d4a50e2197097ebe9962d03f13cd40e198ed98df08ada52def0237be92a74799ca0329de5aa3599d63543a7cec5da3ca3","ssdeep":"","tlshash":"cb900211950d58e36d1124c4190c070010e821804140ca00cd4c6254c9090666041520","first_seen":"2023-12-02T21:57:17Z","last_seen":"2026-09-02T02:03:26.186406Z","times_seen":17,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/cacheKline","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.571Z","timestamp":1788314547571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/cacheKline HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnUUGnF%2FxiVF88cLopOl%2FJ5JijgzYYnbU9TKbBEQF2rhBtvGH9Y4Fon1PojhY%2F15on0t34kcO469%2BHIlyztD6k17gv80UJAWRPrKyJkgHnnwzjK%2FtzB08Li5PdzyuNorxWPT9g%3D%3D\"}]}\r\ncf-ray: a348eec25c9156ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":947,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/remind/getPopUpMessage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.634Z","timestamp":1788314547634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/remind/getPopUpMessage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 63\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":63,"data":"{\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\",\"userId\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDRz7y%2FqQ3Tm4XE%2Btxk6jTYJzccZ9JDkZc0Um41%2FjEZkvFgw8lenrhonCmvaPitEQeRNfgcre8bLIpAnJFRsqOmzPZ4RaIldE%2BnRk7st0kDSJVrbbiR4VzxwkrYYq24%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec61ef356cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":701,"mime_type":"application/json","magic":"JSON text data","md5":"345cf1f91d9479f3ef2b937c70725f21","sha1":"bda030b5326810b07faaf9e3fe23096144c739c5","sha256":"66a7356b8324552f1e387e30bf545895e17c68bae95d805e806b5303af84a2c4","sha512":"6d523c40d3dbf3a5074077fad65624106fe831d14752b93f798bcebaefb1e9a2339f6b9308446a2dd172fa38f7e8e47c06d13510062bd539a4b04fef6f8c360f","ssdeep":"","tlshash":"db900411d50d4cd31c1135c40d0c070011dc30434540cf00cd4c5714c545075f051530","first_seen":"2023-08-15T00:50:22Z","last_seen":"2026-09-02T02:03:26.191038Z","times_seen":13,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(7).0080f187.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.091Z","timestamp":1788314546091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(7).0080f187.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-8965\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gt4J4veNK1YlKtY1i2RljrAEF9AbbQL%2B%2FuA33y%2B11jvfTUymK0J%2BhxWMUlkvJgUctMWUCXtEfm7fiUzjmQEf4hCdhoVoETGEh%2B%2BHqWXl57VOBZ22f0qHTo8MCKMhOdP03Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb918b156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35173,"size_decoded":35961,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"eb32dec311b32704d90067da21d8b84d","sha1":"e72514f42734b10f9f935e9d96dc4dbd6a7777a8","sha256":"0080f1872e97a88e0dac0e1d685fc0956bcaaed541c98deb23926033e827ea46","sha512":"541f11bc6495790b0051fcb93e671da6099686aa15e907be5e79b926f2ef3b6a6169704f3e29222db5e11ce8d4fe3870a7ad00047d6a791be46ea878b5ddd200","ssdeep":"768:JgAx0Mt2N9LQIQarg6GvjYzYAoTPbVg/d8KJkSI7Kf:JgA+zPmug6Qws1KJkH7Kf","tlshash":"62f2f13d4b4536b79d8ea63a784382c9507688cba7fe5246ba6c7a3f70a430d9043c09","first_seen":"2026-03-17T06:00:28.233197Z","last_seen":"2026-09-02T02:03:26.191753Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/wiki/wikiArticleManage/findRecommendArticleList","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.668Z","timestamp":1788314548668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/wiki/wikiArticleManage/findRecommendArticleList HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 160\r\nOrigin: https://msg.bthdya.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":160,"data":"{\"pageSize\":5,\"language\":\"en_US\",\"userId\":\"\",\"appId\":\"SjDcQcOZ\",\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\",\"deviceId\":\"f58d2670994742e38e54734db00517e7\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\naccess-control-allow-origin: https://msg.bthdya.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQkOFHSo9hUNzSHjgU5KJk5FWSvBv5thcMxEpXPTLmRFMiBvpcEMKrsgrNG4glQ4qqW%2BQjhpQFxgumYKD2zTSVmvNpgWk152rMXlCfmBS11R3bNemXTucs%2BDE7yZAO8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec92847b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":912,"mime_type":"application/json","magic":"JSON text data","md5":"ec6a2266b226eb72a6eef0ada8a98fa8","sha1":"38d95eba0da9351c744866aa706594728571978c","sha256":"6e19c3cc3943f853c19e9fd3229bb0506b12c682af8dfd63a803fea89040e9aa","sha512":"e7bed1891607b840114c5ae15b8f644d01f294605ee58cc374211ab7618486bd0eb09972f0eed6381b5af85bc047acc8a61287c43f6bd8ef970f0585464d2b01","ssdeep":"","tlshash":"14b01102380caee2bb00a8ca080b03a202aa30008c20ab00cbeca008ca0e028aa02820","first_seen":"2025-11-05T20:32:40.079506Z","last_seen":"2026-09-02T02:03:26.192593Z","times_seen":13,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/resource/fonts/DINOT-Regular.ttf","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:19.550Z","timestamp":1788314539550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:19 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\netag: \"6a8e55c4-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 164\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LUWo%2BzXd9rdQP2HmLPUOECM7SAG2CUz5l2OHAjGR5AJMIyJ1aoE60sGJA4k9A6L%2FmyYb%2FDz2epKOeULaN0rLADcyYqY4h%2BF7Zz2R0PCELDaKrbr67vpzfddpAg%2FecZ%2BfUw%3D%3D\"}]}\r\ncf-ray: a348ee90283056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12381068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12381068,"size_decoded":12381842,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-09-02T02:03:26.193175Z","times_seen":120,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.103Z","timestamp":1788314546103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MVNhkpe7t42w8miGNd5vALGXg%2BlIV5o3iuNayLnebEMBH6eOpUk3nwIKA7mzHAloFJsVcXpAs4SW32pAJ7cdRbdri4qKmZ1sCZ8%2FxoZ2nzPZMuMzAEhTKiO5562DGo%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eebb4b7856cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"7f0acadf169401f54b24b3b525062559","sha1":"57ab8765c25b7301e216e2798b31de9b00f7dc80","sha256":"8c4617282ea8699e6a0249d2d0207a398c1bc3df7d2e19b261f457d978d182ff","sha512":"8cbae786d97e2e4c5121745395117c3844aece51348d883826e4dc36f3fcb9deddac0a1d2deab0c00fd7263bbe522f096530c112cf881d94b3542c8c5c7bcbe5","ssdeep":"","tlshash":"4b018e82561488bcce56a6dd1c8e3a201dafbc00e09f1ee3915cd428d98efdab0075e1","first_seen":"2026-03-17T06:00:28.25798Z","last_seen":"2026-09-02T02:03:26.193777Z","times_seen":12,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/announcement/list","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.152Z","timestamp":1788314546152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/announcement/list HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0GJ3VxnYCU4oScNu7hXvXB0RCixsnlmILOiRAQbwi6f4CVpwh5a9Jn%2FIXk6vGHIaU%2F6xONDhC80iuG8BwEIlQRIfDDaVLVv3VVm1Uj0v0DVuu5pjyEHNs5hYE%2F7nieBcXXYBQ%3D%3D\"}]}\r\ncf-ray: a348eeb97c4256ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":928,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/SOL.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.997Z","timestamp":1788314546997,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/SOL.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/png\r\nContent-Length: 404\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4A705D030337E725B\r\nAccept-Ranges: bytes\r\nETag: \"5E22A9302A4383454BFE530F0DDFFB53\"\r\nLast-Modified: Sat, 11 Apr 2026 10:58:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18276743004581408811\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQwQIYgYCA577i8OsZIiBhYWExZTFjMTY2NWI0MzQ0YWIzNTYzNjU1Zjk3ZTc4MQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XiKpMCpDg0VL/lMPDd/7Uw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":404,"size_decoded":1040,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-09-02T22:31:32.611441Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":1590,"timings":{"blocked":1334,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/platform/stable_0709/favicon.ico?2.0.1787684176847","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:24.966Z","timestamp":1788314544966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /platform/stable_0709/favicon.ico?2.0.1787684176847 HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:24 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tt3%2B5vK0cH8BWN7QOEtFbKU1lglclN4KsGSZ7SWqdhWznDf668cn8r%2Bac%2FH%2F4McbS7bPKMOU5%2BMkVwjdDnvQ7p90RXfC0Adach8y4JBmNsxiDVw0xQiz5ZcPu%2B7D4ILpvg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 168\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a348eeb2088c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":718,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T08:19:31.451158Z","times_seen":320378,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getFrontSetting","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.095Z","timestamp":1788314545095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/common/getFrontSetting HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: Gk/wq3oL/UBecn5l0gfACmIuovBWU2b0ExvF3jQHyw98MI71EVCwYS74EKUZYlU15O/iXyiQuUcl9qdQ5O+qBD6t6xNRXjmKkZfPSyoOzezWPlIdrMBGWAkzN+S/BVHZBIhpaBnWqE4QNT4+s95aSNdxa4vzX8E958LxjKl3BPTrl6m08+sXi7LawU2JlN4+mWbxzjGWebPYwSU4JjN4T/xNWRdD+mG7AxlQaAvw2YGT+uwEJgOvLdpa6wgWH0N+xy9/K8fbT8C6DbkjOIdYj9Jc33i0WatLgrVAGEKsmMiSteEmUbLudCEjJ73ldFOcLjjpfa80/nziFHTvgRaK2Q==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8YZAvqudhgvm%2BrkgC0Nn4MLGRnVaFv8MC0MdLgB4tmEY0lHbd0xEDJ%2BGRGq1Gbonhp2YIqGuJhFhGieVs0Ex%2FEsTu15mFYvOYz5W%2BA2h5mhpZqc%2FvnnFLi4a5nS67CT1nfLeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eeb58c0556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3517,"size_decoded":2253,"mime_type":"application/json","magic":"JSON text data","md5":"4db97817faa10fd2aaa29b69bee58793","sha1":"ecffdadf9fd4cb619172c28629a2e9e114e2ebbb","sha256":"8248329552323518896df3820e6e31c81cb3e6d04bfb250b92f78caabe7b50cf","sha512":"128e8460473e39af9c0755965b24a4f69832a2387547bc33fbd67a2c4b5382f49e351e4a215e6ec4d4819d4d875d3ebcfd03f73013a6df6e1a631951c62bb1ef","ssdeep":"","tlshash":"1a71500a780cd9faca815e6c2f7ecd3b625570b93c476c68b59ec08d80de4346a66827","first_seen":"2026-09-02T01:59:37.862728Z","last_seen":"2026-09-02T02:03:26.195636Z","times_seen":4,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/0a08b317befd48658725a820da5b5e75.ico","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:28.840Z","timestamp":1788314548840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/0a08b317befd48658725a820da5b5e75.ico HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4286\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B45A61C6313552E4C8\r\nAccept-Ranges: bytes\r\nETag: \"5F031569F682F1CBD594DD67A8B4694C\"\r\nLast-Modified: Thu, 09 Jul 2026 23:24:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11712311172188742577\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYCA5_vkpPoZIiBiZmU1ZTIyZmU2YTE0N2JhODI2MzU2ZDg4N2U2ZjYxYQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XwMVafaC8cvVlN1nqLRpTA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4286,"size_decoded":4949,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"5f031569f682f1cbd594dd67a8b4694c","sha1":"c24c0407132447c350a2e928c7f05f3e555fb93f","sha256":"258ef856b39b9767aa80e369bb04d4a509dbdd6f0538dff3588e479e0b29f786","sha512":"d708e15869252ba8433e95712ffbbbed55835daa2203a627b687fd6ed8276543be32d31c6fe099b4728ad3d44492cd45b28ae9c5a4c363d9d0be4da2dc529e5c","ssdeep":"48:H3EHslTBLy39qSNBfkFw71p/kZ+YsOWWn:H3a8NDSNBsFw71i+YLW","tlshash":"d491811d8f34ba22ca56663e8640f330c2784d646d0441c78cfced573ac369abc28627","first_seen":"2026-09-02T01:59:37.89255Z","last_seen":"2026-09-02T02:03:26.196366Z","times_seen":4,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/ac9005cfbd4d4886b206e184da3c6751.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.043Z","timestamp":1788314546043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/ac9005cfbd4d4886b206e184da3c6751.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8450\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B45A61C631353BE3C8\r\nAccept-Ranges: bytes\r\nETag: \"6EBAC4DDE57B42CB66812B3901E0529A\"\r\nLast-Modified: Thu, 30 Oct 2025 11:08:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 227434362868818170\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDA1qKc09EZIiA4M2NiNDdlMjgxZWY0YmU2YWY1NTNkMDNjMGIyYjhlMA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: brrE3eV7QstmgSs5AeBSmg==\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8450,"size_decoded":9111,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ebac4dde57b42cb66812b3901e0529a","sha1":"1f9c2634a43d70a7bdf16a8e5f808f98470949d0","sha256":"f0abcbee057f85b06e60431e41491c79787670ccf8536ff597125257bb57947f","sha512":"f52acb4e1a33283cc936aa95ec4a408e0c66054643185965551976432886e72a21cb66312a7431967b3b1175f6e6c682e6d21639055476d341c88cf3116fa0de","ssdeep":"192:/c5xVQUbyobeUS9UH9V/L+5BAmF6r5acmI3affjSX4VhopIp:U5xSKyZbmj60yWab3OX4VhopIp","tlshash":"2502be30f2e5149e5f09c6c026a53d5ac3cac3c743e162ae324e9b1e464256ebce09e6","first_seen":"2026-03-17T06:00:28.275829Z","last_seen":"2026-09-02T02:03:26.197054Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2120,"timings":{"blocked":1845,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/getUserIm","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.635Z","timestamp":1788314547635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/userInfo/getUserIm HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9rNKPRp0soTxg1WNRO35VJyuwNxhy%2FxVhAOZU3%2FqXaq17FjxXsg4zXTSea%2Fx%2FCoq3GHrN64uz8kYJTqU4lIF89TKDmLobIH2SW7tCHV5g5Y6DOsqKb632JfPS%2Fo6h8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec63efc56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":769,"mime_type":"application/json","magic":"JSON text data","md5":"12b3dcd4c22a5c7d77e54137006fbdf4","sha1":"5fee3491453d87c6297383acb02cf3650b4151b0","sha256":"163b2222de7b21614e9163131f8f522937c6b5c14eb8e202e1a1ae9fa9081f35","sha512":"510eabcbdcb3bd3fb4901fdf4a64e101a395a754ab5b850552509611d0c03f66f961e6971a10bb19c15740a97049e89dece6abee837819f9d8636354f46f52a7","ssdeep":"","tlshash":"04c02b51b1dd85976c0873ed090c0f1235bf74f00145c948dbff640ec80452c70b4828","first_seen":"2025-05-30T06:18:46.964607Z","last_seen":"2026-09-02T02:03:26.197658Z","times_seen":13,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getCustomerService","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.170Z","timestamp":1788314546170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/common/getCustomerService HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUzoLPAd8tsaGD6R03ejmeMfknO%2BleKat9Kq3yyRYrwiq63UZwWr3Fb8TzZ3Tq%2BELNd4re1a%2BQsCpE9owWjXynNLiTaxpqdJ7z2kjgj160Gc3LfPd%2BOZDQkVI9V5%2BOpGTZ6KzA%3D%3D\"}]}\r\ncf-ray: a348eeb99c4b56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":932,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/e66b3a9d853a492785fd64220228a348.jpeg","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.861Z","timestamp":1788314546861,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/e66b3a9d853a492785fd64220228a348.jpeg HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5121\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B3F4F6753733D851F3\r\nAccept-Ranges: bytes\r\nETag: \"4DECCC2BDAEC66A8FDC59F3F60880A30\"\r\nLast-Modified: Fri, 16 Jan 2026 16:28:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9403886888068217802\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQvAEYgYCArt3Fnt4ZIiA4ZGRiNDFjM2I4ODI0MGJiYTA2MmQxZGZjZjVlYWIyZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TezMK9rsZqj9xZ8/YIgKMA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5121,"size_decoded":5783,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"4deccc2bdaec66a8fdc59f3f60880a30","sha1":"2a2865bc62e65d8b845729959b053e5642b17a40","sha256":"ff568948fc8c7b78238ef3298c5abf6c1a7ad81400db84d0f10560a1e4d4d90e","sha512":"9af2b608fb49646aec577e6d27acb365a0f419571a64cf1fcb0d4d54e1ed626c9ab9e2ad5390ec5d3bbfe87a305befb323da943310a787aa052d0ee68e8f3c5f","ssdeep":"96:VPSca4ddN8gIlPrKBXvEw7bzeh8LfAYPcLZ4x5WuxqmFSsku9:lDduF4e2Xq4PxqAS1g","tlshash":"7cb18f379e11f4703aafc07ecab61a42736b34846708e4880f92517434d9fae5523ce3","first_seen":"2026-03-17T06:00:28.258831Z","last_seen":"2026-09-02T02:03:26.19837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":506,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(6).13b6543f.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.090Z","timestamp":1788314546090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(6).13b6543f.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-8639\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZZ0iJf06Dul99%2FTdM7790hLLCZEelXh9XGAhaso3bufHSrkiH%2BiA%2FKBDIVgLPew5OgBBnuUfxVpvrUdUH5cUucCzkrFYC8sPNYUyMG39s3CkWHAKpSMmxt8gpQuHa65NA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908b056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34361,"size_decoded":35138,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"aded16a8532e5472c9a523d425a6a015","sha1":"99a705cd981be9399948fb677c442c3d48061954","sha256":"13b6543feb44c0ebe2f1586605a74b9c21c6d1ec5a915c066de5fc83f75b2d87","sha512":"3958b3b87d6674d458ee04d935abbb7eb180df301bf009dde6ba56afdd20ede0d033221db0293f99899fa4945c666442a28d2c532c1dedbcb66bc5ad7ff17cc7","ssdeep":"768:YiLDam39eHg6AyePIZQj/By9O6USxB4Qz1SsSODvM1WcMU:YiLDaGeHhAyN2j/s3USxB9z1SsSOIwbU","tlshash":"4bf2f251aa95d7c2e0d501b0a104e9e103a9d4df9f3a34928a0e1c9fdee7436770dd63","first_seen":"2026-03-17T06:00:28.300573Z","last_seen":"2026-09-02T02:03:26.19898Z","times_seen":11,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/23387cbd0de549cf802a9573a727d97f.jpeg","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.866Z","timestamp":1788314546866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/23387cbd0de549cf802a9573a727d97f.jpeg HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5121\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B378CEA83332D374A6\r\nAccept-Ranges: bytes\r\nETag: \"4DECCC2BDAEC66A8FDC59F3F60880A30\"\r\nLast-Modified: Sun, 02 Nov 2025 09:37:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9403886888068217802\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDA2draj9IZIiBiYmIzNDlmM2Q4ZWE0MmY3ODgzOThjMWQ3YjczOTQyOA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TezMK9rsZqj9xZ8/YIgKMA==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5121,"size_decoded":5783,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"4deccc2bdaec66a8fdc59f3f60880a30","sha1":"2a2865bc62e65d8b845729959b053e5642b17a40","sha256":"ff568948fc8c7b78238ef3298c5abf6c1a7ad81400db84d0f10560a1e4d4d90e","sha512":"9af2b608fb49646aec577e6d27acb365a0f419571a64cf1fcb0d4d54e1ed626c9ab9e2ad5390ec5d3bbfe87a305befb323da943310a787aa052d0ee68e8f3c5f","ssdeep":"96:VPSca4ddN8gIlPrKBXvEw7bzeh8LfAYPcLZ4x5WuxqmFSsku9:lDduF4e2Xq4PxqAS1g","tlshash":"7cb18f379e11f4703aafc07ecab61a42736b34846708e4880f92517434d9fae5523ce3","first_seen":"2026-03-17T06:00:28.258831Z","last_seen":"2026-09-02T02:03:26.19837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1033,"timings":{"blocked":762,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/init/initMessage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.256Z","timestamp":1788314548256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/init/initMessage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 147\r\nOrigin: https://msg.bthdya.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":147,"data":"{\"appId\":\"SjDcQcOZ\",\"userId\":\"\",\"language\":\"en_US\",\"userDeviceId\":\"f58d2670994742e38e54734db00517e7\",\"deviceId\":\"f58d2670994742e38e54734db00517e7\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://msg.bthdya.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUb6OxSIeGyOv0kPm0FP1mm7Q%2FyJm2YXDX5bmN%2F7pc1AgoB3pfSa%2FIBYZS8mHWp9QDc4k4B3gTWfZFhwlCNLl2EOFPs%2B1A8r1ELDAQUtSZjOvrMLaiHhF1mJaPjOUhY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec69f7bb4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1111,"size_decoded":1227,"mime_type":"application/json","magic":"JSON text data","md5":"240fbcda20df923a4da87940df0039c7","sha1":"e7baaf30ac05ba864db68c54021ac7d840d3a5bd","sha256":"cce961e295bdcf0aa4df8cd6d270ef84f6fdbfdea9a93c7b46d91f24783ff82a","sha512":"e0b80f5143be6ca14ca9820526344ef7aeb6c1c13bb602382d4e7aab675a91d491d7cc9dbfd5f963255c66ea9d47ee2c607e6c770aa17bfd7b5d2db0e07a457b","ssdeep":"","tlshash":"b821128494641df8ce5c109ebc023f09bee96413f69f1ffa560e9e06a0958ed711b6ac","first_seen":"2026-09-02T02:03:26.199632Z","last_seen":"2026-09-02T02:03:26.199632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/platform/stable_0709/logo_144.png?2.0.1787684176847","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:24.961Z","timestamp":1788314544961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /platform/stable_0709/logo_144.png?2.0.1787684176847 HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:24 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jxRSDZZmGjLo%2BPY6YE9RMcB9NriKZxEE2dUT0N%2B2bcXRgxIv8IUWZiDTZJqKTpu3Y11wzPoBOZottciUw%2Bp32vkqce%2FMfmSSw0wiu7Z2Yom%2B0frEuaenzxRH71G%2FjuNrw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 168\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a348eeb2088b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":718,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T08:19:31.451158Z","times_seen":320378,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/ieo/apply/order/unread","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.161Z","timestamp":1788314546161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/ieo/apply/order/unread HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDOoj2hJ4tEfVevDKMVF1nEa5bugzBd1fWfhGoOBwUzqF24kZ6K%2B%2F8aSC062zET86uUiPaepxgI8JvBYhi7OqEWYIqNeY8i9QHTqyZ2tQ%2BNUlLnceEaWyd6nMBRl9ebSfq9bEw%3D%3D\"}]}\r\ncf-ray: a348eeb98c4556ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":928,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/getUserIm","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.640Z","timestamp":1788314547640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/userInfo/getUserIm HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGMOwRLMeYlbsdJEoUB0SzoxJCTv9%2BA9ouvrW3PH%2FZ45zRP42rt68ycMy4e5so9b8XjT9a%2F7uTxuFIIwYGnVAIJc7uy5JW0hpeyCNwKTfwWYRIV2SzylHRMO9VSoods%3D\"}]}\r\ncf-ray: a348eec2bdea56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":612,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/a34cfbadbe984bf7badf0300092a00dc.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.045Z","timestamp":1788314546045,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/a34cfbadbe984bf7badf0300092a00dc.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2954\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4F4F67537338752F3\r\nAccept-Ranges: bytes\r\nETag: \"401A6C76BD791A5AD4F6BBA1ACC1E525\"\r\nLast-Modified: Thu, 30 Oct 2025 11:06:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4223876245091296045\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYCAnbqY09EZIiAxMjM3YTNkNzRiM2E0ZmU2YjU5OTU1Yjk1ZjMzODQ1MQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QBpsdr15GlrU9ruhrMHlJQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2954,"size_decoded":3616,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 456x304, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"401a6c76bd791a5ad4f6bba1acc1e525","sha1":"a449f06e9e1c0d5bdf0238d21ad986d43839eb81","sha256":"d8bee37da18f76efe1244268a9eca25f216af57d768f1845021720f71a60737f","sha512":"7bd16b74c5dbd617ff77277b5faa7ee033ac6f08c061d0d9fde1d4d380e44b0788f4cea07a607b8603cff7305316c04c85d975406837e5ee6ba5a2f3037221ae","ssdeep":"","tlshash":"0e514a6325a1875db4c9a43352da5957fd81edd75a402330ec2203a2af91c0bff60fe8","first_seen":"2026-03-17T06:00:28.230435Z","last_seen":"2026-09-02T02:03:26.17489Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2125,"timings":{"blocked":1856,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/xN4IjId8BSljC7ivdkU_32D1RoQ=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2287629892-45afb575d30b4cedaded3e720372b191.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.614Z","timestamp":1788314547614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/xN4IjId8BSljC7ivdkU_32D1RoQ=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2287629892-45afb575d30b4cedaded3e720372b191.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90220\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2449281\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"08655ed207bb33c07ef2d59bab472449\"\r\nexpires: Tue, 04 Aug 2026 21:41:05 GMT\r\nlast-modified: Tue, 04 Aug 2026 17:24:38 GMT\r\nserver: cloudflare\r\nx-amz-id-2: B4jSFBREqghSUpuLYKbA+XSsyqLhcxXbKGmPEdze0xVZ/A7KUAZAUc0WLektG8E3y0tWCU8Z1mg=\r\nx-amz-request-id: RVX33GB2RPS5ZS70\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=9jLkLvIRSreuSVBDu6V9lNrS9KzWX0lZz0_E0zp7n54-1788314547.6375895-1.0.1.1-oPzpBn0rTn1GOosZO_Oj2_n4foDFIRPx07WO_W640CMvnYEuudfsNq2gU_yZDIntxSuo3Ov9P_R1woJHFEYYMwlN386.0HNoC_a6WdTgGTXVUSZXdHSpy3iyePpnEEBz; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd0e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"9jLkLvIRSreuSVBDu6V9lNrS9KzWX0lZz0_E0zp7n54-1788314547.6375895-1.0.1.1-oPzpBn0rTn1GOosZO_Oj2_n4foDFIRPx07WO_W640CMvnYEuudfsNq2gU_yZDIntxSuo3Ov9P_R1woJHFEYYMwlN386.0HNoC_a6WdTgGTXVUSZXdHSpy3iyePpnEEBz","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=9jLkLvIRSreuSVBDu6V9lNrS9KzWX0lZz0_E0zp7n54-1788314547.6375895-1.0.1.1-oPzpBn0rTn1GOosZO_Oj2_n4foDFIRPx07WO_W640CMvnYEuudfsNq2gU_yZDIntxSuo3Ov9P_R1woJHFEYYMwlN386.0HNoC_a6WdTgGTXVUSZXdHSpy3iyePpnEEBz; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90220,"size_decoded":91490,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"08655ed207bb33c07ef2d59bab472449","sha1":"1c7993eb3453aabc7aa3f00ead95a9b72ceb293c","sha256":"62ddd54c8e872fac147efda658662ed641cd52508d2fab46e0ea5060aa8884e2","sha512":"301d26d76d2341e65a5733d0f4d2d37c831fc4eaf16547f50e032d2079e0cae249b4808908a167c5eebd5d00d6e8038a3b43c70e99270de2103116b137c5a0b8","ssdeep":"1536:3OyK2etRoJWfjQY+JraJMYuqICKe4Po7fS+sxvEOc3AwgdWWo446E3kBwwXd:3w2etRKW5+JNxf3oe5ttjcWM36w4d","tlshash":"b49312e7d8b5c340e4d9f1350b9a18c4a96728fabff81c9a148d0da414f6676de8cd22","first_seen":"2026-08-09T21:36:39.633261Z","last_seen":"2026-09-02T02:03:26.200569Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.3a84cdc7.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:23.248Z","timestamp":1788314543248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.3a84cdc7.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-82cebc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 169\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAYxMm7F2lOwDXim7KyAiQsO8J10h1dIHVwwjxMEuQFmfVy9NfvyMdeFDUpQ2dkChUzks%2FNFVh%2Fc59Ht0z4DYzl%2FgYYyvg5UdAlnwCHKTuSoDOw0725MDSehC6KVyGWQIw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eea7587656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8572604,"size_decoded":3942795,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67fa039d85ba3174767f77fe32565e57","sha1":"b06d057e1bfde05e9ec7751f4fea3f25b13d894d","sha256":"955fed65f3e52cc3a528c5252c50a3acad5116e74541b885c7654c79a3d7e141","sha512":"59a7480d3f38d3e7d6454e7bace0b6d0717c00543183762cc9fcd2523a64b8de9e76507fb74d5800b629ff147120c4b7d1955324c7f7c3f7410e5d937993d5f3","ssdeep":"24576:7hBT6B0211OQGRAN9ioPJumCcg6eSF6fVY3PX+uFETn0o/F:1Bmu2DOQGRAN9ioPJumCcg6eSF+Y3PXa","tlshash":"a1254b61b194f82207fb94d780af0411e269135d605ad4e0f5baccae325ee44a2eff7d","first_seen":"2026-09-02T01:59:37.840222Z","last_seen":"2026-09-02T02:03:26.190039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.7056c528.css","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.083Z","timestamp":1788314545083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.7056c528.css HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NbErAkEoFSmF4xJUlB3oGZXkBJN3YQCEQIX3STN7IVsmYTpzn3Q2U8oWi6jVljYrhIwmibTEo0OgRlajrkzmW938OGftG1yqDEab3YEqdDtpVB%2F2ZPDZlNvQRbU%2FiypmPA%3D%3D\"}]}\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=2,i=?0\r\nage: 167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a8e55d0-ca\"\r\ncf-ray: a348eeb2c89056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202,"size_decoded":879,"mime_type":"text/css","magic":"ASCII text","md5":"517b6e1e17d72db23e5cdd1b5dc7e471","sha1":"6c30be6b7ecada9934806e449817aa17fdb4e963","sha256":"7056c528904711c0520ab69bf74116421a8514f2110dca0bd6e2540b58ff793b","sha512":"c7f53ac77c99398283c627ab5be5715b724a3d2cb426050ada5f8d43c813b19d84c5b5d034758dc052f3df6766bfa105dfe4498e772d54a3c267c12b12185d48","ssdeep":"","tlshash":"24d02211b3cdd10c641ba027ea42ecfc35008802a8cfaae2dc03102fc8c26eba20460c","first_seen":"2026-08-09T21:35:45.326142Z","last_seen":"2026-09-02T02:03:26.201181Z","times_seen":8,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/crystal.31d5c7be.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.062Z","timestamp":1788314546062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/crystal.31d5c7be.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-5a2a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ws0b62JDglH9N7f6tlyiBz6BIPUfD1fnfJeCRuqNZl01WEoD9xK45L2rC0Dx%2FUJEG1ZSohMr6fzHpYi67qPvhAvf4EugRT%2FWh9mT%2FXTFK3dYSkK88j%2BQ2qazoUycO8txbw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb8e8a556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23082,"size_decoded":23533,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"22bc1baa06f83f9bdddb707e62323b1a","sha1":"73a04d29d5ff88a7c7ed5512133ae7100268561c","sha256":"31d5c7be0e7131795bebae0e3a484187da9652b5a5f772e71c711340b61d9d25","sha512":"401ee13f95f2242af019d42b515ea027188d027dbb750797beed614ae450c295f8b700c981a0c3108dc6750021819ee4a51c25f5a3035a53d13e44b68458ff94","ssdeep":"384:UwhF5HHNpvTOJZrDxzlislg7oWCCbFOm5Jme062pa7OqhX0IMdrwfNh0WNX5:RXPpbOJpDx5W8WbbFOiJn0zpVqhQdrwt","tlshash":"03a2e1b25304afb4e8434b7476421370ab381b77df2a05894f16cbe8022ad22fddc65d","first_seen":"2026-03-17T06:00:28.285126Z","last_seen":"2026-09-02T02:03:26.201713Z","times_seen":20,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/6a15afdc06db482081fe14ef8b9a6a4b.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.867Z","timestamp":1788314546867,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/6a15afdc06db482081fe14ef8b9a6a4b.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 606\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B35A61C63135EEE2C8\r\nAccept-Ranges: bytes\r\nETag: \"C1300528811BB358697DAA0727F82542\"\r\nLast-Modified: Mon, 13 Oct 2025 08:52:00 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15582671726780883380\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQqgEYgYCA0vqJ884ZIiAxZTNmODE2NDNkN2Y0MmQyYmE5MTg5NDUwNjRkN2E2Yg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wTAFKIEbs1hpfaoHJ/glQg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":606,"size_decoded":1268,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"c1300528811bb358697daa0727f82542","sha1":"4b8c294f370d5ffcbee223b06e76e86d53c8bfe8","sha256":"21855c1fb666b3de50a325df90eeb2975bc2fa10951571a1beff866c67feba79","sha512":"bb90436e16c937131a5aee3fda063705c7cddeb74dfe183e0591e4473e0c9ad5a6304a708237d6f6cb2769504f97d051f474a9c0479e88c76ff2e38412db54b3","ssdeep":"","tlshash":"ebf062d6ce87c490cf3f0216e0920b10881ac6edf3d228097c0828522068d2278e53b5","first_seen":"2026-03-17T06:00:28.282436Z","last_seen":"2026-09-02T02:03:26.202231Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":770,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/home/homeList","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.128Z","timestamp":1788314546128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/home/homeList HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: MmZWI2rJ8KSDXlvCCUQ+jnu2tdsJI/rt/Q8jrDUrtZmNe3wudiI1XfAP6GTy6jV26B1kIwmBwwm1cwNKBfGE9jWqECYixicENWosBeYH9rwZRPt6fHb6l2LV/2/jNBpeZLZbPLCvjNyqZLVhEFxOokrLQDQcf/oK3muIpIlvELLJA/6ibmLMSWO74XlY04wHvSTOPNSTiE0ekhtN+ayqbZq58CK1USkR7GsovZGYCrNGZwrQOFBXLbxZ2f1z2PkejnIGotH1MZb+fuH7LaZY0omv8gjf7k1VOBE9quRyG9lm1xCg/uo3GDuiSuw88BxNiirq5iQ5YzF1juvdD8j6RQ==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bt6KacT9UV%2Fpx3kKT%2FnNtWBVjnjF1nBHRHOP7bqUnCv4c7NyTXHRhhW3E0VzTUPsWm45E7Bo2aZ4o1fuUUWAb3J39OZzyjlrmYilXEtLFzechXUfA4dYS6ZJgnLnIqjB%2BqHf%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb5c5956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35444,"size_decoded":4922,"mime_type":"application/json","magic":"JSON text data","md5":"ffe8ed4c2558e257abbd2ada3dc0c98c","sha1":"6422be305d45ce866a730a37fe4ef9ac76d3db16","sha256":"81f593ff5c774a1814c7cc5e2e313a1bd7e25238eba0e4f349ffef4e087c00b2","sha512":"644c273b9c9e1e3ad2b84c826d00308c7f4f7575a6790ed266310fe6877f3acd3adcdb04addfb5018a23cb6c9bcffa3d95a3a9ff35ace4c08cf803ecf2306c04","ssdeep":"384:8Nd4JZIW0cQx8VKu54FcgWtQonn9JJlMdwQSiLCFcQEDtOs4s6qq+rzD0OR89x7K:iCcJJAmUAf","tlshash":"acf23f084128dd3eddab09c252fe7e96409c732759c58e65d6698f4c8ef9e7e220f20d","first_seen":"2026-09-02T02:03:26.202825Z","last_seen":"2026-09-02T02:03:26.202825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/jmVO4Ms8yDgLolk1s143ZJp3ra0=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2286540465-2729c5bc40a94c9986c4f0dcbbe79045.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.610Z","timestamp":1788314547610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/jmVO4Ms8yDgLolk1s143ZJp3ra0=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2286540465-2729c5bc40a94c9986c4f0dcbbe79045.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 109096\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2449570\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"691f252766470d44bcdf879e1ba13695\"\r\nexpires: Tue, 04 Aug 2026 21:36:17 GMT\r\nlast-modified: Tue, 04 Aug 2026 14:05:59 GMT\r\nserver: cloudflare\r\nx-amz-id-2: YCeMnhTrPAwP+spy8mB/f8/3ZOA31eNq8fOvZfQJRSIYPDtrZWJwb4wvdM1cGKnCT+tknJCl+MA=\r\nx-amz-request-id: PVW49AG2EJY3Z7EY\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=mr6_hmX2MZRjLSk50hkZGiIDxxdBPQLdhBTXUTSKGOo-1788314547.6365933-1.0.1.1-Pvk1y4LG_cTlHfAjb4_lII2HpYpPXQXYjQkY9PMfVEhvOv8V0VeXafwxZXaKWlfcAxXJwY6mkpBrH4tNmfnHeKtVHitqyEroDf.YEnp86L_Af6aq8dwXs7n_2Xi8bWpn; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd0c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"mr6_hmX2MZRjLSk50hkZGiIDxxdBPQLdhBTXUTSKGOo-1788314547.6365933-1.0.1.1-Pvk1y4LG_cTlHfAjb4_lII2HpYpPXQXYjQkY9PMfVEhvOv8V0VeXafwxZXaKWlfcAxXJwY6mkpBrH4tNmfnHeKtVHitqyEroDf.YEnp86L_Af6aq8dwXs7n_2Xi8bWpn","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=mr6_hmX2MZRjLSk50hkZGiIDxxdBPQLdhBTXUTSKGOo-1788314547.6365933-1.0.1.1-Pvk1y4LG_cTlHfAjb4_lII2HpYpPXQXYjQkY9PMfVEhvOv8V0VeXafwxZXaKWlfcAxXJwY6mkpBrH4tNmfnHeKtVHitqyEroDf.YEnp86L_Af6aq8dwXs7n_2Xi8bWpn; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109096,"size_decoded":110367,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"691f252766470d44bcdf879e1ba13695","sha1":"b3731e2d3d3e159d50399a507c05d33b697cc466","sha256":"25a3ebd106b52b7fabffd62a85122ded9f8152dcc922906d5f8aa6b4dbd43f6b","sha512":"edc09de77d069bbfe545ff1218d80aeb471f4e4458b7bf685711ce0ecc228753abfafcee1ef63a5d4ae1f927635984f0205a9da1084ae00b54d51eb468bc24e7","ssdeep":"3072:JkCDbDg+8C+gUjO0gKGjiXpoFP5a1/UWQ:qC0CKiiXpoPa1/UWQ","tlshash":"0ab312acb3228552b7b53293aaddb6932997b1747cd4ef9213c90921f41a0f78c8634c","first_seen":"2026-08-09T21:36:39.629955Z","last_seen":"2026-09-02T02:03:26.203852Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":7,"connect":18,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Overlay.15b5a3fe.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.080Z","timestamp":1788314546080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Overlay.15b5a3fe.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-2602\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMaSRv%2FYfpCwMGg5rgZgmKMGZDkFcYL0O%2FL0mjwdRt4YavUQrjwBEKOZJdJz025oiKBh6wSFB5dgsTI2vPDiWtd3SZaQd6R%2BvMAAvhNa9TQQw7BQ6HtVnfsMyH0mr2pQew%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb8f8a756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9730,"size_decoded":10507,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c3bd80626dc684edb3fbbf1e838c245f","sha1":"f7716e54051e9a6039c11aaa94fa38a91d3d4772","sha256":"15b5a3fee8e2fe591858c5f39fac733ef772c5afec5e9cbf6e5eb53de49e8107","sha512":"6ffa8f4f8d545ca9cef996f0362c46b4f7c3bcc83f1096e29165feca7a7883d8d37267e0598e9065e12d16391c4f6b939a8bc7e45124be3a182f7fb73a862a7a","ssdeep":"192:vchzot/4KMPPHzZqLyITxmIZr+FJrcj7u0u8WFaOsZNT0A/b84Wp/KC6LXQFG54:vMMjMnQLy0wIgF+20O6NYhpiC6L8G54","tlshash":"0e12aee1ffa3b311e00572e2789188ab3f490229673a721630799af85f2b0554e65b8d","first_seen":"2026-03-17T06:00:28.269752Z","last_seen":"2026-09-02T02:03:26.204493Z","times_seen":11,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/69399c52d2f148dd81e8840cd0b9b043.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.865Z","timestamp":1788314546865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/69399c52d2f148dd81e8840cd0b9b043.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5121\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B370C1143530ED4611\r\nAccept-Ranges: bytes\r\nETag: \"4DECCC2BDAEC66A8FDC59F3F60880A30\"\r\nLast-Modified: Thu, 23 Oct 2025 15:04:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9403886888068217802\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQsAEYgYCAzoazxtAZIiA4MzI1OGJhMzdiYWM0MDI2ODVmNzNiODI3ZThiMjMxOA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: TezMK9rsZqj9xZ8/YIgKMA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5121,"size_decoded":5783,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"4deccc2bdaec66a8fdc59f3f60880a30","sha1":"2a2865bc62e65d8b845729959b053e5642b17a40","sha256":"ff568948fc8c7b78238ef3298c5abf6c1a7ad81400db84d0f10560a1e4d4d90e","sha512":"9af2b608fb49646aec577e6d27acb365a0f419571a64cf1fcb0d4d54e1ed626c9ab9e2ad5390ec5d3bbfe87a305befb323da943310a787aa052d0ee68e8f3c5f","ssdeep":"96:VPSca4ddN8gIlPrKBXvEw7bzeh8LfAYPcLZ4x5WuxqmFSsku9:lDduF4e2Xq4PxqAS1g","tlshash":"7cb18f379e11f4703aafc07ecab61a42736b34846708e4880f92517434d9fae5523ce3","first_seen":"2026-03-17T06:00:28.258831Z","last_seen":"2026-09-02T02:03:26.19837Z","times_seen":22,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":727,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.631Z","timestamp":1788314547631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /core/v1.21.1/ HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 07:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhDe0hKr09L3Sp43NBiKUUX0EIRUKcy74ej8w%2Bc%2Bd6TcGw3hHDJkIBj9u%2BADROjPPT3t%2FR83epVa0ITpge%2BveMbJYHJW1QEMo%2BarQk7S9VSqnJJHeo0NhVF9V1SK4J8%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a348eec2be74b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5022,"size_decoded":1935,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1167)","md5":"3795bc7ac41487ec7434694180316cf4","sha1":"09621b10e95af78ad8fe18fd79aac3b76e546c46","sha256":"570c35ab9e1cc4d9b9fd145d6b0a2ed19f7036fac25c81b47d470c1ecb5c0059","sha512":"ceb2890b596ae9fc13d6b4bbb1fe04d7c82848e574aa2eea80bd37d42df171263f4c3f13ccd7993a50940855228544d66e64b081f2bdd76bf2027aa5957c18b7","ssdeep":"96:ZW3TKGaphxD2cZ7HwOksWdLxpUW2y/yYeKhhv9fM5MLpBpE40zZ:ZW3TKGaphxD2c1HtksWdLx6W2yaYeKhQ","tlshash":"70a1235b1653108d77139d681bfd2b084165d8478816dcaa3eed036ecf45bcccab3796","first_seen":"2026-03-21T03:01:26.978878Z","last_seen":"2026-09-02T02:03:26.205118Z","times_seen":13,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(1).fb581c97.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.085Z","timestamp":1788314546085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(1).fb581c97.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-7e38\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BL13A5DASazjuCCKi1A%2BIwB9Q12dQSc8XENW5b7Z0p3GsMTTlDgG%2FH%2F4iVcVA2Zlc%2F9feE9zz0mscCrPd328QWB8okuu2FXsd1JxLdRcPfcqO2MWeaBk6FY4mOGoExcNQg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908ab56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32312,"size_decoded":33051,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"75b9444eb38348d745d3fab798f5cd63","sha1":"ce61cd5be98a6e8a4a6bf07e1ca5824cf23c5540","sha256":"fb581c97a214e01c410d0367216d05e5401dde6c5ce526978078dbd9cb04091d","sha512":"5d3f4a8d9c691eeb58f4a387e4fc657b91a392e040b19cc87c6fc47a176bdadcdf50a8062e2008b3c33a5f567da2b22d3f28b00f51be48c7fb099462e795441b","ssdeep":"768:5IRxyuztHVKXcazkiC0WMEbZ9BObd1cn+zTu+Clq+aEKih:5gxT+XcFiCWu2h1c+zK+tEKq","tlshash":"5fe2e13b5cd79f61c33658c51ca4ad26b750d5ace95323cc00d51f383a7aae03a69eb8","first_seen":"2026-03-17T06:00:28.252484Z","last_seen":"2026-09-02T02:03:26.205632Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.140Z","timestamp":1788314546140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyTom4ZEvqJAg%2BrzTEumNU3uqvQgerXnhw2Xx%2BZ5mqB%2BV8oXYuhWThJwAH9Q7aFhYFzp5OpX90of4Bj0r0FDxuNSCwcppn2%2BDyXlu4%2FC%2FJG%2FIZsLUEN1eOy2YpS2T5o%3D\"}]}\r\ncf-ray: a348eeb95aec56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":620,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":548,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/ebac05890f19453398c6de355faeb2db.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.036Z","timestamp":1788314546036,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/ebac05890f19453398c6de355faeb2db.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7832\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B370C11435303D4611\r\nAccept-Ranges: bytes\r\nETag: \"6099F4C56E9F433CE4A6C5EC0BAA1376\"\r\nLast-Modified: Thu, 30 Oct 2025 11:07:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17415989555527504575\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDAntiZ09EZIiA4MmMzZTc0NTQ2MDU0NTk1YWZhYTQ4ZTU4YTg4YzcyNw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: YJn0xW6fQzzkpsXsC6oTdg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7832,"size_decoded":8495,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6099f4c56e9f433ce4a6c5ec0baa1376","sha1":"6b5d3a7b9fdd00421a579daaf919dab6f1fff5cf","sha256":"ca84a34fcd74428f560e1ac64853b7f5fbedd2ec985d02592503feb6ed544836","sha512":"4dc12c4ff21fbe3258f6662374aee29dc5101f11b4699eb68e6fb11cdeea7029f9b1e87dc6693231e742de7709aee01fb86b9bc69496758960ce6bf04b79c996","ssdeep":"192:fSeUNFWIztVVKtC84K+2YerEG54r+t2r0km++sMNt:ajNFPT84YYerEG5oeC0kmr/Nt","tlshash":"eff19ec3f88688f2fd4099bbca5a2be5f1f78121b8a6e27d8bd6647d3000c0505f55d4","first_seen":"2026-03-17T06:00:28.256915Z","last_seen":"2026-09-02T02:03:26.206166Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":2,"connect":260,"send":0,"wait":261,"receive":0,"ssl":774},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/announcement/popup","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.165Z","timestamp":1788314546165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/announcement/popup HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CirDnUtkrWNQWxc7qXJKnauXxuhytcI9U48ai66v%2FHnhXZ3rwkvbrL03KPt0VcG4PGi%2F%2BEdRWh2ILynqqyhVCXr1389P%2Blh%2Fywps4OVlw7tU3WFZEIqkUEjrSMFao4bC%2FwBYA%3D%3D\"}]}\r\ncf-ray: a348eeb98c4856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/menu/getToMenu?lang=en","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.167Z","timestamp":1788314546167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/menu/getToMenu?lang=en HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mh6%2BcKlhn9RHPZlw1MSueKDe%2F7MICjl2XYhLkDHZzsCFhGNM0uNZ%2BhgT760blJSI1m1P1bW7dkej9pgvd%2FSu7FaSu9U6QFFAT%2FdhmDFHynv%2B5uvaqGZqi8tpZCaEtpeTJNJ5aw%3D%3D\"}]}\r\ncf-ray: a348eeb98c4956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getFrontSetting","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.116Z","timestamp":1788314545116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/common/getFrontSetting HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0UQsX1boXzGgPO3BhzpoJRlKVxawgEsfvIMFolrwXN7aajQ1Aam0rD4ZEDnxA1AhMiuQ2jawrvPnIJHU3V8hfQfKNh2XbpG629HWMaiA%2FxdGL0GRvxeQ34gVb7R4mi1S%2F26oA%3D%3D\"}]}\r\ncf-ray: a348eeb2fbff56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":928,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/en.eb6ef373.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.850Z","timestamp":1788314545850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/en.eb6ef373.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-17374\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUAhSXppWxfui6%2BTAVyO8gbc8h%2BjJ1qLqJOhBVDztijXQ%2B1IOy3RvQIrdShu%2FzwBpgr0rixubWj5EjCx5ObzcaRQ8uINNa0A1iLoG2FO4TsYSkvmZNADPuBeobW6OR%2F3KQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eeb7889b56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95092,"size_decoded":30453,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"055f204d015a226c8e54644f9e1394ab","sha1":"b13d5615be7501fd876952cc5985497c678330c0","sha256":"c5e4e9f61b657701e192e2af67f65e3ce49270d91b7b433d37ea647ffaa0c5a4","sha512":"32e548c5e33f517d3fc9dd05e0db5239eeaf68b335cc86f8d11ef40b48f8fc2b66344f3ef8496218c2c4049f6edafab3a100fb51982971f6cf8afee44fed4bd1","ssdeep":"1536:upoHfOXrnjBPu1X09R+/7D2YRDt13uJaXcS5h/Fo2HlK0nlxLVbjx8D:uUYjs1X09Y/2Ypt1qEcS5h/Fo2HlK0nW","tlshash":"8093399ebb12256d4ad703ba3dda2f1510f9158247a1c46f49ecc4e803d17ed63bb62c","first_seen":"2026-09-02T01:59:37.910641Z","last_seen":"2026-09-02T02:03:26.20673Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/#/home","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T02:02:23.021Z","timestamp":1788314543021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWngaWfkec4vMhrkwfr%2Fp9TVaF48vrir9tqTyf3k2gvbcoG0r%2FevBLxX4qQTIzwcNDoo4uNnIhuu9jAfCqn4Wp0X6SaJRiSwKUWmZE6SPo17D14oN0tyeTN7txm7BCuezw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a348eea5e87456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4204,"size_decoded":2211,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2170)","md5":"c7416e4b9e9722885ee232d3937eac76","sha1":"1b9ceda317983ad762c04cfacbf0cb675dcf627d","sha256":"b35d37af4ba7ee54b28ccc387e6c4fe5a74eeffdb1714b8e0ceba62168ca42d2","sha512":"ead72d0eb0e2191c7210f927affdcca3d85f50cc079ea39abbc5cf4da00d04f0ad3cc5e02dd62e09efdd5cf20b65992121ff56f9728e2f7adcf010570b73028f","ssdeep":"96:/czDuso/ocgJyBe/UVK2mUsGKdilwGDKADq2Tu:mwgwc2nfOqbOAm2y","tlshash":"9481946609f2c85413a3513ddfefb206eb32408756064c217dcd69989fd4be880c77aa","first_seen":"2026-09-02T01:59:37.839044Z","last_seen":"2026-09-02T02:03:26.187217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.698e2082.js","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.078Z","timestamp":1788314545078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.698e2082.js HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z83SNcJim0Bdbtog3trburzlWCpBiqVP3FSWPcHza0QIppo6dvKYf%2FhfompZCWd2viqKONTLjfgumPSbfkSQQlSQuo72vnQLEP5NMQEsClYnX9zjQ7qjJjfu8SGYYHs6FA%3D%3D\"}]}\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=1,i=?0\r\nage: 167\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a8e55d0-159\"\r\ncf-ray: a348eeb2b88f56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":345,"size_decoded":1004,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (344)","md5":"d11b767d170981efd773716416f84a38","sha1":"0d6aea3817ac2f1f8a46d40bd06033066abeb29b","sha256":"e9a6e8acb6cdf03ac0c6d28e2c9228941d6d8eff027722446522a4530a62804f","sha512":"1215ff74651555d6bceee7b5a6d0aa24a62545d6f61520043a6f2f9e1ed4df1fbb710513a255b117b2684ae9b3bc9b7fafdca1c859a51e331a3932415b1b8cae","ssdeep":"","tlshash":"dfe0268d8d02cbb5861220a4a6154009121869b2a23cd980a298082967b6878ea2fb3e","first_seen":"2026-09-02T01:59:37.837913Z","last_seen":"2026-09-02T02:03:26.207468Z","times_seen":4,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/BNB.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.994Z","timestamp":1788314546994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/BNB.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2560\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B470C11435307B4711\r\nAccept-Ranges: bytes\r\nETag: \"CB84D3CA48A52E3DF1025731A8BEF4EC\"\r\nLast-Modified: Sat, 15 Nov 2025 22:32:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6590887318613304211\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQuAEYgYCAzanMptQZIiA0NDU1YWQ3NDhiMTc0MDQ1YTliMDE0ZWQ5ZmVlOTkzNw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y4TTykilLj3xAlcxqL707A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2560,"size_decoded":3222,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-09-02T22:31:32.610574Z","times_seen":1669,"resource_available":false,"data":null}},"time_used":1376,"timings":{"blocked":1116,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/BANK.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.003Z","timestamp":1788314547003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/BANK.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19798\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B478CEA83332FD75A6\r\nAccept-Ranges: bytes\r\nETag: \"D827504C639E6358F6F96ADF235B20E2\"\r\nLast-Modified: Sat, 15 Nov 2025 22:35:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1694918199185166834\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQuAEYgYDAqfjRptQZIiAwMzczMzRlMDk1ZDI0NzI4ODM2YzY2ZGVmZTk2ZTQ4Ng--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 2CdQTGOeY1j2+WrfI1sg4g==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":19798,"size_decoded":20461,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"d827504c639e6358f6f96adf235b20e2","sha1":"724766faa0df62d951635b8ccf735639173710d2","sha256":"9419323193d7449c1a23d84073617c64d7fa40ea4f701cebbbe2080e1460ce6b","sha512":"34d173cc69691501ea769c81e648241f6307c8d55c99a7f038e64a0313aca9b3adc0227aae3a3a9591a7ec4e1903e5818f463898800db43aa1d554779763acd1","ssdeep":"384:20yL/Qd3xWfKUksoJBMMGt+n0akHQq1ov9KzL5+:20yL/zKpsoPpnzuQEU","tlshash":"f292e0bf59ce295ba4c36734c9fba020e7303757cacbfd75a240a40342d06838151ae2","first_seen":"2026-03-17T06:00:28.243661Z","last_seen":"2026-09-02T02:03:26.20853Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":1454,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/a3RjC5Xg6CTAmh-vfpWuqqR0GqU=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2274484367-331bcfbbcce7432e89e581de379d54d6.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.618Z","timestamp":1788314547618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/a3RjC5Xg6CTAmh-vfpWuqqR0GqU=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2274484367-331bcfbbcce7432e89e581de379d54d6.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 125208\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2518130\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"429b21d9c4dad23f0d215547e3e2111e\"\r\nexpires: Tue, 04 Aug 2026 02:33:37 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:54:51 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ZTnnPAKBMVPlsrs2TGe6rlRS1Dqm9KtEHFNVDO7Nm6wP2hp9ojH8LSCT98z9GCBZmmAyAyoIIRDrXOUzuhxGHmS4qZz3i2FJ\r\nx-amz-request-id: MRCHBF8ZTF21GM58\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=SW20LshG3S.g6Og2dLC3AdNdkn5lPZW9J4elESxF0gQ-1788314547.6393003-1.0.1.1-xdPMnk58ZGIVuNT_z37K_uvUECKcgXq58ZxW5upGltpx.fjb2KxYN6fEz4QNV8C2.WjsL_FsOZCSeeOAKKdQb99op93ct5H0M1_sslxUspn0uEPhdr9H1t3ce9M1Wrzg; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd120b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SW20LshG3S.g6Og2dLC3AdNdkn5lPZW9J4elESxF0gQ-1788314547.6393003-1.0.1.1-xdPMnk58ZGIVuNT_z37K_uvUECKcgXq58ZxW5upGltpx.fjb2KxYN6fEz4QNV8C2.WjsL_FsOZCSeeOAKKdQb99op93ct5H0M1_sslxUspn0uEPhdr9H1t3ce9M1Wrzg","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SW20LshG3S.g6Og2dLC3AdNdkn5lPZW9J4elESxF0gQ-1788314547.6393003-1.0.1.1-xdPMnk58ZGIVuNT_z37K_uvUECKcgXq58ZxW5upGltpx.fjb2KxYN6fEz4QNV8C2.WjsL_FsOZCSeeOAKKdQb99op93ct5H0M1_sslxUspn0uEPhdr9H1t3ce9M1Wrzg; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":125208,"size_decoded":126499,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x998, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"429b21d9c4dad23f0d215547e3e2111e","sha1":"e4c439b0506d42b790cb2915d47faacb3a73e80e","sha256":"3acfd269891d398795f619b006608d4b907bbc6fd6b625ad2cf41a0b556963b3","sha512":"1ff12b26a66ca0689dd04e2f7be98957a622c720b90278787ce9c5b5075315c7f6237c40c733cd07a88c48a7858c0e78113880b0e6cb6cd35b0287b0655bcc7f","ssdeep":"3072:insxCGXTB22sSMdecPl8Hf5F4CbNQR7KwGwUgxwZsDv:inOXEjRPuFl5Cm5tsb","tlshash":"35c30218537cb2c780526cf27e4c8c904bb6e727bd8d6a13a0f451607a9ac76a4f3277","first_seen":"2026-08-09T21:36:39.6455Z","last_seen":"2026-09-02T02:03:26.209122Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getLanguage","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.099Z","timestamp":1788314545099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"POST /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: KbMqqjiDoJPH2XzRnjID/RrHOfX9lvgcLMLia1pMBQz4Bn/dBlIq5I/M7fkkqZPd7/qNCpA9Hx9XBjT2h90v4g23eW7LZzUHWuPg0oQuoO14jq3F7B3tZ1GF1wpvF/ymVEx63rih6TJ+PGdLrUyPL8Hkpu0R2cR5sbvpWjts80qZRoR3RzzfSrhdO1FZL1v3Mz7MRiPd//bPYfJn5qL+TQwa9V5ZoGR8F9V7i4zNdDaF5PNME3dS3zMLPoqQiTRcd6VG9TTgOukV6PBvIQ6p4weZ7MfLneeNvtplshhWOKPxfPU838zpYoC0/TQ4sf9i9IVkN6tyj4Trp7AcLAeqBg==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00iXK1FfX378gPaqYZ1uXKc76A8ItDtKxeo09bbi5OZJ3vfhdmPsQY9kYRyVvtwO%2BRo7TGAy%2BAZhXDmxrBkS2yZChhVMGFA7RBkZDNhxVyKiAN5ByKICZT3l524eLM15UnpXtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eeb58c0656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3442,"size_decoded":1695,"mime_type":"application/json","magic":"JSON text data","md5":"0f3a54bd5a5b682ee368987192d5d537","sha1":"5b68e938547d273b451413676d7cac3db435fb4f","sha256":"48e056d9107bb43c2ac5862d0fabac0cc16062ad9eaefce31cfa0ae6f7b9cca7","sha512":"9059c9a8f7a8e3189809b61b2d2c01b6f1e19060d755bdbadde2ba6233adda47df70117b381e39e227319ec26d866f5bdf00ba20fe202cc6be95642ab34e8bcd","ssdeep":"","tlshash":"4e618d055228e58f1c6e449b90afbdd9c1eea60bf9c0ec0466a74f9c0d1cd7a3d4f096","first_seen":"2026-09-02T01:59:37.889018Z","last_seen":"2026-09-02T02:03:26.210192Z","times_seen":4,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.105Z","timestamp":1788314546105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiXUoga2G2MqlK1x6A0rPOQDarc8EA0kF5d%2FDOMriq6U0yJez191EagUdiHVNk%2Bfkfkt01BawAcwzhAJHe0NT55uYYw4P94vIdvVCSFoSb86UcNzUu1J7vV0gSsQacE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eebcdbf756cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1046,"mime_type":"application/json","magic":"JSON text data","md5":"7f0acadf169401f54b24b3b525062559","sha1":"57ab8765c25b7301e216e2798b31de9b00f7dc80","sha256":"8c4617282ea8699e6a0249d2d0207a398c1bc3df7d2e19b261f457d978d182ff","sha512":"8cbae786d97e2e4c5121745395117c3844aece51348d883826e4dc36f3fcb9deddac0a1d2deab0c00fd7263bbe522f096530c112cf881d94b3542c8c5c7bcbe5","ssdeep":"","tlshash":"4b018e82561488bcce56a6dd1c8e3a201dafbc00e09f1ee3915cd428d98efdab0075e1","first_seen":"2026-03-17T06:00:28.25798Z","last_seen":"2026-09-02T02:03:26.193777Z","times_seen":12,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/SAPIEN.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.004Z","timestamp":1788314547004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/SAPIEN.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10161\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4F4F67537333D53F3\r\nAccept-Ranges: bytes\r\nETag: \"A6FEB76450A894EB5F981190566ADF20\"\r\nLast-Modified: Sat, 15 Nov 2025 22:33:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12712915055722779691\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQuAEYgYCAmP_MptQZIiA0ZmQ5OWYwMDQxMGQ0N2E3YjBlYTAwZGZiODk0Y2ZjYQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pv63ZFColOtfmBGQVmrfIA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10161,"size_decoded":10825,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"a6feb76450a894eb5f981190566adf20","sha1":"686243ba90ff0975c4e17ae60df983b6ebb9f6aa","sha256":"46c9ed34d179dee218ff57552d629bbb4cd67486f2b7e5b26d1358dda496c8cf","sha512":"437931787f94697b9e9c8f6be421928434cd8bad8909ef2d6b02a151bede575dbc69e49a7281f0878c4a077792155051518873b0c46f8c17821ea1a5bb7fecf4","ssdeep":"192:nzQ2NUDIYmuI+8Sal7y/dXgqCWojKggbd8jZ1V6hm1y8R1MYetq7HLET98v6V:nkJN/I+8St/6qjmKgg6d1V6hmT7eA7Ha","tlshash":"2822bf51e49f868ecf9bd710aa060a12dd0bc64a9345568d9ff343028cb9b813e96dda","first_seen":"2025-11-11T15:48:21.719753Z","last_seen":"2026-09-02T02:03:26.210731Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1454,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.107Z","timestamp":1788314546107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0MfFzQF8tG2rj%2BmANvZ7O4GbgT%2FI3qV15ehzDuEIojpgEf1g1Exqbs6Z6eSZ9LyWXcINhL%2FuSSNFg82hbDCQkC4Xay0VwqaUffcne243boPN1TqNVAbj0Sdwf4DsXI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eebccbef56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":1050,"mime_type":"application/json","magic":"JSON text data","md5":"7f0acadf169401f54b24b3b525062559","sha1":"57ab8765c25b7301e216e2798b31de9b00f7dc80","sha256":"8c4617282ea8699e6a0249d2d0207a398c1bc3df7d2e19b261f457d978d182ff","sha512":"8cbae786d97e2e4c5121745395117c3844aece51348d883826e4dc36f3fcb9deddac0a1d2deab0c00fd7263bbe522f096530c112cf881d94b3542c8c5c7bcbe5","ssdeep":"","tlshash":"4b018e82561488bcce56a6dd1c8e3a201dafbc00e09f1ee3915cd428d98efdab0075e1","first_seen":"2026-03-17T06:00:28.25798Z","last_seen":"2026-09-02T02:03:26.193777Z","times_seen":12,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/ieo/apply/order/unread","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.130Z","timestamp":1788314546130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/ieo/apply/order/unread HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: AQM5VUvbL75eOXaFEoAGyyjG/hXEe/hMF/kl4Cw3P+XaXPTGbfE+ZEj/ZeKSc6Gqo369tn6XigK/vXcCTX5wF30Sj9LqD0EamUumOV/UclDPd3sxSDVg/VrfReXk0kCP1BBYN+Jj97Z3ti3l02gY4U5U+NQTngw4IIZYa67b/L0ioHZYgKymVivxWPwhdIG3ORCcC7SHBVVfKTSgm3UjCIxTDUmAMC6YPyUdM9ybnL9Qeg/IyBb2wjvnRmP0+RpDYPJAxNpwdMC2dMZ+UirBmrRWm82z5n/9J0oKXM4hIXxUGVI9BofmsVw1xO6vT5hiaTEMD/OMQ//RQdapEloYsg==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bJcJLVbEa2YJ6jtbEy7Xfvep9ArSRcWEfWupm%2BSdxEVisI%2FgdGr60ApJPuHflB1WsuqvOXdgkMeLViTfIAnAzOjLwMGATM6AZQO4zfzoehJ6%2B0uRYt6to2hmJnZQtpC7M5Qog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb8c6056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":846,"mime_type":"application/json","magic":"JSON text data","md5":"80400275dc0706ba8e045b2bd6e9461f","sha1":"6a28da3947a0a77092455be33970da48be77edb0","sha256":"5f925aff73c03695ce960ea1f3bee724101e1ff2915503c8f682c81c628c458d","sha512":"30d7c6b73a77823d0aff5fd0b0302c0b03cd1bb3ac4f882aa5e60dec3d757b872812de56901b544e17f6faafdf2c53fbb05235cc1e4113fd66775d1de12211ab","ssdeep":"","tlshash":"6790041c540c5057351307d47145030405dd50c31f10cf5d0cdc5734c4c41747013d5c","first_seen":"2026-08-09T21:35:45.286246Z","last_seen":"2026-09-02T02:03:26.211262Z","times_seen":8,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/img/default.e16de918.png","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.667Z","timestamp":1788314548667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /core/v1.21.1/img/default.e16de918.png HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 6544\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 07:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6954d562-1990\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nage: 242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNATrK2F%2FUGZaI0xy%2FZH18q6wn0KIeE0VliP8l%2BAzMFuJewVHQ8%2FO6gYfIrFY%2FH6MQ0WKHCQLVjc0Qnz59dv5H0h1Z3b%2BBXYrT9zVXuA4yPUkCtTva7Qc7WNEg%2Fcvvs%3D\"}]}\r\ncf-ray: a348eec92846b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6544,"size_decoded":7393,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"e16de91889e9659b0bfb3b7b337f898e","sha1":"40d6f9143bd5b7a6c1190f215aaac9144759f4a6","sha256":"8d1cc225081c75e70a6c8dbcbf6708e0ebe907c4fcfa002886d92f1f8a5afe88","sha512":"d5af86c835ba24ff9fea631f9cf310051fecc66ba929116d1f5ac736989161615f7fad47810840cdc882f23a75ff74e1d541939e779f6c783e85cc4527367ce9","ssdeep":"192:1nxFjJJJJjB7WihXoqlCfyTvn9Xwwu+GWxcAjIu:1nHJJJJl7fRLl3n9XP5zO4Iu","tlshash":"a1d17dbb5e44ae47a74c9cac0d74d7068b93846696463704fc2f99334b471d611e32a3","first_seen":"2025-11-05T20:32:40.124946Z","last_seen":"2026-09-02T02:03:26.211842Z","times_seen":11,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/platform/stable_0709/favicon.ico?2.0.1787684176847","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:20.462Z","timestamp":1788314540462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /platform/stable_0709/favicon.ico?2.0.1787684176847 HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ol%2FMDvDycscjiIsYr879C7h%2BZBO9JaUsjAplVZVEOWwoUd5dJJAe0Mu0kpXSK6tVSvaTtFfI5Yet%2BWt1vWNEPOuk%2F94bItowMBUO48prwu0wykuXt0lDLq5etIcVqqLIYQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a348ee95d83956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":714,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T08:19:31.451158Z","times_seen":320378,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.bicokt.vip/mz/ds/1f3b3a59-c1d4-4762-a4c6-406d7d44d22e","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.012Z","timestamp":1788314545012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /mz/ds/1f3b3a59-c1d4-4762-a4c6-406d7d44d22e HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://basetructcc.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zCemY9b0QJ+dn8V0hHbg/g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 02 Sep 2026 02:02:25 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://basetructcc.cc\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Ut5Rs80cEYp8q+B4H98CZSefeog=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgJF%2BizaOrdOef8Lgqv8D3z55Jkokjjf8oWTfa%2FqrrRrCmEW06V9dV5sMDU1EMQyxYgRCAjEZ3Pjy24SL6DgBGC2sKWP7DYaUK7jTaTQzI5xT7feu08sfxxf6qBOHteZhsoWHg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a348eeb26d240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":881,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":795,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/news/list?pageNum=1\u0026pageSize=10","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.122Z","timestamp":1788314546122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/news/list?pageNum=1\u0026pageSize=10 HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: AjDa7sVdZGgV8dObYg372uY3FJR16UBpSLwss8LSLKHsFF1TvP9E12q/j47MhdT+iyoJbmwMImsxwj44AmdDFq2OkSttqO815AqpKt8ty8micpwrmSlIGJtkwm1r+chOwcHSH5VWO9330LUGClW6WjvRcASOVgXBPe0MtpShPrdbnaLLTCpupndryytKPDCwvcU74z1ztgiR/Q3r5ylyFj0YWYJcw0vbU0AiJDrreY/Kr/yAFYCEJftBqkLhmYl0SNBwYSOfhM5b41FqvNXH2/ZQ2FCMj279A/B57SAZqonou9BuQok9IGcPk8Wz7Mi9lfyphU3ZlYBwFqGJEaVabg==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAXKBsPqol2Nbmavl6BuQU4OTNHvU8BIIfMqOXPLD%2BEqGHVDD22bYQCQ70aH9VXvBZgtf1e%2BTBG32uA%2FsZAmei%2FZr45pR%2BQMWQWdgdVQlRclshRM%2BjgxAhwcxuALcsc5JRvMkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb8c5f56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9450,"size_decoded":3507,"mime_type":"application/json","magic":"JSON text data","md5":"4eebc1950f682d3a9fde4460bd2b420b","sha1":"4e062ec4c304ae8e5c68fc04968a7542521496a2","sha256":"c33882c2dbf7550c4902c7c115b7f637b1faa29984c63b1c3cec59cd1af7f757","sha512":"3a6a87b8cbb33f9f0100a36bbf12491725960a69d2ab046e4f3547bd0f0312b0f0bf2d4975dc9cfefe63d0ba794ff1091ec743dec97ac17510a6d2ff43cbba0b","ssdeep":"96:7dbeHeAZa6xSRb2v4694v6KAEmboML0R7K0G6OTZtpxsHaKdeZTmXUg6wI9J7pTw:T8kYW5MYRQLV3EeZRwY+j","tlshash":"2712728a2766cd7edf5b06df65687a98d79f338b89858d39b4db0f0c04600bb193d908","first_seen":"2026-08-09T21:35:45.256176Z","last_seen":"2026-09-02T02:03:26.21235Z","times_seen":8,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/16fa3a662be442429453c8088a3686da.jpg","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.035Z","timestamp":1788314546035,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/16fa3a662be442429453c8088a3686da.jpg HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7039\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B3F4F67537337D51F3\r\nAccept-Ranges: bytes\r\nETag: \"98F7F70BC832F143E6F1E6ABBEE4C452\"\r\nLast-Modified: Wed, 08 Jul 2026 19:20:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14262317364795271514\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYCA.JzajPoZIiA5NTQ4NmMwYzhmM2Q0ZWNhOTFlZmI0MmUzNjNkZGQ5Mw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mPf3C8gy8UPm8earvuTEUg==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7039,"size_decoded":7702,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x183, components 3","md5":"98f7f70bc832f143e6f1e6abbee4c452","sha1":"965ca99b1fc53f1278a177ef70352bf94e187a79","sha256":"c47d135af4e002a3cf0c182f8d9106980b3ef9535653dde4dc1aa2d8292ed216","sha512":"c0f4983c78674a8c5b99c52a185891978aaaf725543cad1cae1054870f4ad57a08a935af264d2b22542e9b8a8f17ace87be9298a37750d5f99f0b3d4fcc4b4f5","ssdeep":"192:u/4kPiIQSzqQkAugrZgkhse7qFjkHHQWhRtkk:LaiI/fdZJhANuwwfx","tlshash":"75e16c40c8148b44bbb9abb5a0cb3f2f2a702ad651ef2fc915102e5254ed67cc45f02c","first_seen":"2026-09-02T01:59:37.866251Z","last_seen":"2026-09-02T02:03:26.212959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1339,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":268,"receive":0,"ssl":802},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/a4e985ec3cce48d0b9b516a06a5bc46e.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.041Z","timestamp":1788314546041,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/a4e985ec3cce48d0b9b516a06a5bc46e.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 548\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B478CEA833323775A6\r\nAccept-Ranges: bytes\r\nETag: \"E7DC91F1004D897E0E5B3F7D674700F3\"\r\nLast-Modified: Thu, 30 Oct 2025 11:08:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6059763464518443704\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDAmbqb09EZIiA1OGM5ZmJlMTYyMGE0YmJjYWI1NjFhOWI2MjQ1ZTRmOA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 59yR8QBNiX4OWz99Z0cA8w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":548,"size_decoded":1209,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7dc91f1004d897e0e5b3f7d674700f3","sha1":"855153de57f686b15bc5d6a439ba106f4eb8b33d","sha256":"512c2a96e5c15d1e71ea67902185648eb880160ad690f83bb58bd4f35efcfe3e","sha512":"2089f247c5ff96f74af4fed75c50931388e808c97b2ba7f4869998da49b6fd03fc489d1efaa524349c1c48326a3691a24da15a545243f40c7c51eed986a9aed9","ssdeep":"","tlshash":"71f0c0b7c6c27005583423df5193e6c8e84117637565dbcc65a0a4b844f504bb597fbd","first_seen":"2026-03-17T06:00:28.299685Z","last_seen":"2026-09-02T02:03:26.213679Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2112,"timings":{"blocked":1844,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/right-arrow.53d44eab.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.061Z","timestamp":1788314546061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/right-arrow.53d44eab.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\netag: \"6a8e55d0-2ae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 166\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vwzx272Ry3BHbro8Ymxlru8GY41hr4VQxD7s8XF%2BIdsu80bDC1hV6IEjcl%2FswXEVIbGv2mTexbJQkHkxlna%2BBvd%2FL4La0Pm%2BcChsqqmKF2P7p9Ho7Y0BWlFLkAYabgENKQ%3D%3D\"}]}\r\ncf-ray: a348eeb8e8a456c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 686\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":1432,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fb67ac71c9c258800df792288482d098","sha1":"24cff72ba21923ee37321694427d8cf8eca8a18b","sha256":"53d44eabc21982bc682cca283d2ac1cf758cc4c25b81b5f68a4b477e3e61ff9e","sha512":"b114eed1fcc9ed7f382d31028408dcab7ae8c70e2b37c6bae57f9e857b6f783db9eeea16123ca4a1b80d5232c75ba73eb3c6adfe821fdf99fb91ce08cb4fddab","ssdeep":"","tlshash":"a8018b329320136cf4115bb490c91b83f378b92a569b573ad28046620b14cc1b89d687","first_seen":"2026-03-17T06:00:28.247337Z","last_seen":"2026-09-02T02:03:26.214232Z","times_seen":20,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/home/homeList","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.160Z","timestamp":1788314546160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/home/homeList HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjat9%2B4ZpgN8ZGSloT7Rq6DyCNsvRW54hxkrzUvPZuIiKnFF9qOth2A42BIgpIYqZTM77r%2BiGtgauKjvfIsKM4LIslVsK79rXJvnLhkMBwIFvGvc4Tzp60cdJjhKOxKY5MJmHw%3D%3D\"}]}\r\ncf-ray: a348eeb98c4456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":926,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/binance/XRP.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.996Z","timestamp":1788314546996,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /binance/XRP.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/png\r\nContent-Length: 953\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B478CEA833328975A6\r\nAccept-Ranges: bytes\r\nETag: \"92F9D15BE55070C0F267E7B9609211DA\"\r\nLast-Modified: Sat, 11 Apr 2026 11:00:43 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12504633752802818255\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: CAEQwQIYgYDAmIHn8OsZIiBhZGE0OWZmZDRmMDM0NjMxOTc3NDQyOGI1MjM1YTBiOQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kvnRW+VQcMDyZ+e5YJIR2g==\r\nx-oss-server-time: 22\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":953,"size_decoded":1590,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-09-02T22:31:32.634068Z","times_seen":1667,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":1167,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/resource/fonts/DINOT-Regular.ttf","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:23.353Z","timestamp":1788314543353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\netag: \"6a8e55c4-bceb8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3jq9AEdXF91owstAHp3TpgclD4rqrf5CiTxKEV2k%2FfhAgAxBa1gCtu1VakIgYHbri3TUZBhHTmh0Z2hI8TxZSwq7v9ywhkgNY6vC1PQJNBhPqqxEZxjUFH8XBaLo2ve4A%3D%3D\"}]}\r\ncf-ray: a348eea7f87956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12381068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12381068,"size_decoded":12381832,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-09-02T02:03:26.193175Z","times_seen":120,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getCustomerService","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.143Z","timestamp":1788314546143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/common/getCustomerService HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: OrjQsF0GDy4PFr2w5j/zZymnlFRwH9buX4svf4IlvLTgHFUdwaZmP7rn4ac9JGaV8PESX3S377UQVYAPENwzr/K2eu6u/jA9z0jAovOHGTbbEvo0kOwjW82+Zv+aW4BrgQa34ouk+8HMp37RF8053Xqqq1g8o69RVmEh2O154b2ZKAtzEx6SMp5gaHuU1E+ndMJLx9MUlR46Xnjxsn+o1/HBBtR0xN5Q2jA1HCTmG2xXEkVFFD7qEK7uH5QnbhJIKbob7YnzuQn5b9CNNbZWvJtv62mKaCwDX7LjRAUZnTv7O3SRi8h4DsyOP/u0CS1bmb6oIedyNaQo0PjBdDk2ng==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss0NaVK4%2FZrqjWjv9I2n0h5z8pr3GehjLqPtwT0ctWQqVg40LP2WIEiVaWvYh8P7xTdn5Niz0SzE3nl%2F9mVApS2naITFIF6uDJ9G1fjIBdbym1bqFua0D666f5D%2Fzh2rPowqkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb7c5c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345,"size_decoded":1087,"mime_type":"application/json","magic":"JSON text data","md5":"8901a532c52c9aa1fe981b2b6b07fcd2","sha1":"5f101e875a84815f2cb9bc3f4b80c2b8f8ebe3e3","sha256":"35b5861cd50a87e4775211c385f0361e4257c0c91625af9af16a3923472530bb","sha512":"697afbb05fd8c21d340d18dbe86ccd4a1965da20c827bf0af906a1a3e3b7a91d057d43c444ac19bd6c88d29020fb6057a6ab928c167421af1998f1145920bd03","ssdeep":"","tlshash":"a3e07d05452cdc5b495505d360ddbd80d1ae290bd800ce3074aedf9dc6f88f4321a806","first_seen":"2026-09-02T01:59:37.890026Z","last_seen":"2026-09-02T02:03:26.21533Z","times_seen":4,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.626Z","timestamp":1788314547626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,content-type,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yom2VHYwKOxuUVicL2rDsQ5SXIEOyBZAET8LIwJAG%2FVFwoekNeycmPiKhTy0ewp%2FIB8VhV5SjbEjxiJwkos%2BjnaW9j0ORNykWsZgGjRicHMLUrHDRgB39449ypu%2FtMM%3D\"}]}\r\ncf-ray: a348eec2ade456cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":614,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/chunk-32e34531.5e57b886.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.631Z","timestamp":1788314548631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /core/v1.21.1/js/chunk-32e34531.5e57b886.js HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 07:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fM6s38CZ0OYGe%2Fa74D5jjX72vuselMVlGIM%2Bm8rG2aGAh3axBzQGUrYwgmwnvpYBbYPHmrkL9yRfS%2B7W8rqNWIOcbYuhNFvQEW6GmZvk4%2F%2BE85rnW7b4UTRpqp5we3U%3D\"}]}\r\nage: 242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6954d562-73e3\"\r\ncontent-encoding: br\r\ncf-ray: a348eec8e837b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29667,"size_decoded":10576,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29664), with no line terminators","md5":"2fde0a83b079a23e9b8ef8b32ae856f5","sha1":"0ea39fbaf39d6c89631aaa383c08ea8a0feead33","sha256":"7c60d9f7a2786e5725f3a933b25eee5a1661af90066a139f19982670637a7dfd","sha512":"cc99d43f10f86ff9b8d68d2f3627ac0206f9afc5abb380dfb5eec0760ea13bcc9175dc79ae2cbe213d29166eb7126d7c85ba66903ef4ee1fdf476075a47e42c4","ssdeep":"768:qc+drILAb7iqb1IYELxTE1uGbCAb6mJtA5GO82JF:kj7iqtNGIOd","tlshash":"c9d24c3660d5d83c7e269142354a260998252ffbe00a8cd9f3729dd58cdb89a733db7c","first_seen":"2026-03-21T03:01:26.949376Z","last_seen":"2026-09-02T02:03:26.215993Z","times_seen":11,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://msg.bthdya.cc/userim2","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"104.26.5.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:28.891Z","timestamp":1788314548891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /userim2 HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://basetructcc.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ICP90Yit9dGhK2aFr+03WA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 02 Sep 2026 02:02:35 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: zKYyh6o4fzywqr6IWt5NC8fmS0c=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7AYLDS%2B265DS%2BHstgHB3ZRQPXfqssRPuNe3DGHIEdhGpekpBy4fZn5XNDsJbvUcVx3znzL1aFZyQB8%2FOrDH%2F7ue9IcGkZj8EfgDqNIs4uoJ%2BpHbYp5M6HLXVObVfKE%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a348eef2abc0b500-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":565,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":13366,"timings":{"blocked":0,"dns":6403,"connect":6404,"send":0,"wait":552,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/index.5e982a75.css","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:23.250Z","timestamp":1788314543250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/index.5e982a75.css HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-66851\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 169\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYu5xGHayzn41l%2FUiEa8dQaY8uSCOIbdsQJru2qsBGqnf3E9%2Bxjfv12LsS5w94VMPm0EYXall78LQNvLOtU3qfZMzYY%2ByAETFxw%2B%2FtVFE8p8pkFxUfZN3H672113nOvYUg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a348eea7587756c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419921,"size_decoded":62600,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1c4a851d05d161e2385d90d064f00ac7","sha1":"e848144d29c4881365b7a9ff0d3fb1fd35a16750","sha256":"5e982a7507ce35c9d443a15effe7bedcac9b9dee7b7727e1f574f2e8372cc4d4","sha512":"42d9987e7f70b97fb5675a35f84f6b49729292dd9b340f5c70009fc619db7b469cb54ee36051d4ddcba3739209965391f784495332ecb7a92d010e8e21b9e665","ssdeep":"6144:aSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0rd:24g4","tlshash":"2994e755e713153b2827d63d79c0e9986f14df92d9228bb6fb40a40894c7de212e3e2f","first_seen":"2026-09-02T01:59:37.895679Z","last_seen":"2026-09-02T02:03:26.177611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/black-hole.95908709.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.021Z","timestamp":1788314546021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/black-hole.95908709.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-e990\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2BdEznXVrF3WltpOaEMyH5EqAxIOb%2FDw0Qiu6%2BjOKlR77lNV4g%2FxtEEa957%2F2TNw9t%2B6rEih4%2BTCJwAq5ULrOwlq9HQ1EpOkqgadop43OtWwdg361yqEJKlynuuGpVFNcg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a348eeb8a8a056c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59792,"size_decoded":60129,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"da0420da71318644c13f46ca82ba8b5f","sha1":"fc42080a7250d3a3bdfdac44be248b5b9b6bf4a2","sha256":"959087095ef44e4a3957eeffd1fbef8002e8bc2cc952622443975a2e2c807bd7","sha512":"97f4627a456a5b04e62f5c34aa6da4a81806072af176225a2c1bf8c25ddf8c5c27c03fb4c102658c802f2f078d029209f082502f1cb901597e95787c3889eec4","ssdeep":"1536:CyibjfsXG4804aMv58fmU/9ybgIhX0eMMs9:Cyibjfbv58uwwbgAXw","tlshash":"0f43029a7b965f65fd1a66bcc0cb8af13f357fc3d1053c0c6081ad3846908889ad649f","first_seen":"2026-03-17T06:00:28.245389Z","last_seen":"2026-09-02T02:03:26.216548Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/alert.d45f8370.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.059Z","timestamp":1788314546059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/alert.d45f8370.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\netag: \"6a8e55d0-2b0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 166\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDYAZX2gYnd7V9B%2FH%2Fmrt7nwSEVmbinJkygwh2IKML1t0VqDmhV9gP4b9fLavV2yuk%2BMuaeOE%2FoBDvTO0VcOHXNmCDwrEC7hConwRC0L3RGi37WE7bpCmdRvoA5k81SuCA%3D%3D\"}]}\r\ncf-ray: a348eeb8d8a356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":1432,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"8517f9169f080f14861562afee15bde9","sha1":"a3fc1841c899eb92cfa888570061990a5d753db7","sha256":"d45f83707881660ade33f2d62bccd7fa92eed265a5e38ea777c676cb623e57da","sha512":"cf785a83b10756f0ac6415dc4ad5292c1e19ab57f96edb341955b4b0e70c7b0e36c560631df755590cb2fdcfb57a096dfd2360bc4e25aac8de302ac1149ee3cc","ssdeep":"","tlshash":"e20120396320538cf4302bb065e00b03e3b77d258aaab326828043220f18cc95aec9cb","first_seen":"2026-08-09T21:35:45.304095Z","last_seen":"2026-09-02T02:03:26.217081Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(3).1c52abdf.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.087Z","timestamp":1788314546087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(3).1c52abdf.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-967a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA3S2o1I6yd6PHxLgjZuYAJ%2FVxOnNFuYvPnCgcCfj%2BCVhQqpyIkdpACijE7x27sxO41t8obCeOFJFKifFqgDoUgAwK7N8%2F89LTRFrav6iBxB00nNO5rX%2B%2Bmxf4zskwpXzw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908ad56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38522,"size_decoded":39308,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"aa0485d3d79ac0a96d026b1bbb72e96d","sha1":"c83673b6b9bd5917890cf10302ff147ac8f1b7f0","sha256":"1c52abdf9a3f2fd63bf0882bf7b91c4707c0286fa4dec8cb7b99978269f4099b","sha512":"151d238ed7d6425b46713fcfdd9b4bf82377e7054aac9105820b4b73425eefef64ea06a5ad459b6cf209eb6cfd2f44fd01790683c554252e8d297625706af4b8","ssdeep":"768:feuXv58IIzAP0YXpc2ZGhIVOUigO7cTmg1YONa0/HfGwj1KRdHsJfxwT16bN+Dq:WuX/PZXeFXcTP1YONr/ua1KRRQJgYsq","tlshash":"1f03f1dd947c27a95c1ebdced4da65a903b7c2ce682481f610f283934d7290164dcfae","first_seen":"2026-03-17T06:00:28.267894Z","last_seen":"2026-09-02T02:03:26.217633Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/OverlayBlur1.65f8ad6f.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.082Z","timestamp":1788314546082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/OverlayBlur1.65f8ad6f.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-1bcd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SO9eSk4d2cUa4Q4NYOVEXZ1BwninIkeqvun%2BhiirYtz%2BKAcb%2BUK9ySLWgmv%2FGK8iiB%2BoXCGJ7ohXfSQLOqzco4WhUymc20yFpFNVUGlBEKuvAv3hxrD15u0FuX4pBO2lmQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908a956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7117,"size_decoded":7898,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"40c3eb80a12aee9a3cef5401aa9be442","sha1":"65e135915d16ce4c1385687064b2b1611c0f8fe6","sha256":"65f8ad6f642cf882defe7c71f31c981ec1acddf77a7146ba90a6b2fa2143befc","sha512":"676273076e003ef1fdde4483a2e6d5d5ab2b3123fc5242822c3b04f49610314be98b2291c2844cbf729901d66000862fd0ea0d4c157c6f031b2849ad8ce9abb4","ssdeep":"192:tap0dLpBM+KzuCsjuWpEAyeAmyOy3xf9Qcf:gp0dFBrnChoyFm9y19Qm","tlshash":"57e1af53c473179553e037710716eea568f87e5e0e5ad2280a7393e01d8d9181d0fee2","first_seen":"2026-03-17T06:00:28.239273Z","last_seen":"2026-09-02T02:03:26.218162Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(4).452faf1b.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.088Z","timestamp":1788314546088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(4).452faf1b.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-890f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBp%2FyEqT90RPiwq2zSd33WcCdprFUtWvAWprqpMsGMZNc2lJUuMK7hX1VU48BSgVbIEfuXeeAL70ZUk1zeOG0cHUY170k7RGNWTn15dFIS%2F9pnStHuWR6i6sFK6bvdgzkw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908ae56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35087,"size_decoded":35860,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"ebaa3eb5871f2c2e4784bb0a8cad4730","sha1":"14d6044161897c0edfef15f5b2d3e638b2a2bfab","sha256":"452faf1bbf8458dc6983e58dc9f61005e1d58f41f3ad3bdb4eda3da396f51e8f","sha512":"9676870ce84172bd2dab09ebab010aeb2e891716514ce34e3589d74803a0cd7f571fa4b73d7b0e20ece8643f424e8f788c09db6ba606381485f45baa2cc664f9","ssdeep":"768:+tz8tPl2y2VV3CsBam9H15zIb/5qAgCl6nM+4d03jxZ3lCQM:cylv2VV3pD9VaEAg6GM+JqQM","tlshash":"5cf2f1e0b2a8c7f8656ba20d3a3652e91f6ac18f18fd3e850949c5c47eca4d53253f90","first_seen":"2026-03-17T06:00:28.289937Z","last_seen":"2026-09-02T02:03:26.218687Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/61b3f58531fe4e45b0dac08db8be9b8f.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.858Z","timestamp":1788314546858,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/61b3f58531fe4e45b0dac08db8be9b8f.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5554\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B370C1143530964611\r\nAccept-Ranges: bytes\r\nETag: \"C0F9AED6B3AA3DE0922FFCA64DF68DB3\"\r\nLast-Modified: Thu, 23 Oct 2025 07:23:39 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7667134053870219184\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQsAEYgYCAgK7nv9AZIiBjNDQ1MDkyNzIzZTQ0MDczOGIwZGExNjE4Y2JlNzhkZg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: wPmu1rOqPeCSL/ymTfaNsw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5554,"size_decoded":6216,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"c0f9aed6b3aa3de0922ffca64df68db3","sha1":"584e37f6a04095ca63df6bb9cbf57d3c7b565178","sha256":"c071484c3657423b14c43a5abcb5bd32e96a2de0a73896751b2d71b1de7988a1","sha512":"32e930b4709fbfb549b32b06c71d67df5fba5cb7084e94fdb19b81ae689172eb0910af5669646841e9351c8279552dd160baded41b50a1c4831c09d4c4a1a0ec","ssdeep":"96:GtHrUYCt4MS9aMPKFGwUKqGYu8zjNyE4jqlzSuo7bgick2:grMt4MS9acKLlvQit2","tlshash":"f2b17ee65a6c7c7264aa55983660632d91434e10fd7e0219b7f3b432fd7407d29a0f1a","first_seen":"2026-03-17T06:00:28.248143Z","last_seen":"2026-09-02T02:03:26.219378Z","times_seen":22,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":473,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/menu/getToMenu?lang=en","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.138Z","timestamp":1788314546138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/menu/getToMenu?lang=en HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: PKO+RgOT/ABgO4zuBGspsPvaMRRdPsfHsURWILIkgtN69Ha6M6RCdOhMHKDymPfoxGlhR7IMFu8PFXEzEp3TPBJuQ3ikGY8nkW9jCgqgQTzEb3C2yzWyNtzYHcE7w4QmijeCOCGg2xS4HFqFcmIjyL9IsDl2WeWh4A2P1qawANBuYz/NZGZX/rwiiG1vecMQpBh3A5PxHechTn4ADJlfOCQZbCIzxFq0/5zX6NwxMIO36obQ8kLtpXifAqKP6EC75QK0CrHzWwzsesqlZLvJJ22h4hHAZT04MtRKcCkR1jsdj7Hv60dPdvBH5yLwVV5M36/aQKoz1pW2KlEQyxFTSg==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mc8KwbhWIwL%2F6lZ6bLyQH1S90xvQcE6X%2F4UoL1pYc8Ppz5DoI2qaqaALbIuHGMxaA4JHQmz5fHh1ikJut74qARsqrplmdh%2BbvUhn6qojNMUmatf6pYIzwYYfraqpk5UxXsVGmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb6c5a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3326,"size_decoded":1687,"mime_type":"application/json","magic":"JSON text data","md5":"8adc141bc851c38fe708447c3335392d","sha1":"616c640b5d95bf1aa09cad14f104be1ca066c94b","sha256":"239d274db1e586d45775c8ec41602b344337790b413b0451148472714a408a6a","sha512":"5bcd401e403109560a52d6fa096511f7220acdea7c83b3a50ebc2dc605b9c59e6cb960bc3f4f112779a599d2550fca9323bb54874e28eee1f8d681ddb31b03dc","ssdeep":"","tlshash":"a5614a9530119a589ec515d2488fbc0bb56f362bded90fb402ca8f3694fc7a60a1b6c7","first_seen":"2026-09-02T01:59:37.928304Z","last_seen":"2026-09-02T02:03:26.21991Z","times_seen":4,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getCoinLogo","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.144Z","timestamp":1788314546144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"GET /api/common/getCoinLogo HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: DYlv33zxDfy9vpH4+XhHRX8J3HsFETD6UP6XvauG1O+PfjjUai1BjQ/AZttD7iC+CW62JtZzn5+2gwq056GA+fYPNgkLazyMUU+3eZ7c58SApvgxNcvvhX+PpsXvkzqb2m2ZZk9zGp+Ab+psXGxAtR5vFzFlhrRd2NtN/6TfoqU5YrzTDwfWbYTiNoW/vVWF/z7m2hQbHnHHW4ug1uAUqqnvQyhX+IXvb0m9WZEuldw2wPIylq1uLvmuuJOQxfwwFM1Q+J6iJTwyP8DfwWDELrr9jaJzo5fY3LqsWEsarsXZjCcbIGMk5U2PaSC+C/2TO+yFrzAZGFBdDtlLQWV9oQ==\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CE01WbUpJiINicmuo9RZbb3h8o3Kk9tRnIKrCMZbtC2LCYtn%2Bv%2FCgCflrTs%2F71Cu8cZmWLLDvNAJhm1ecPySfrAtMpHEXa2OJsmHsTYhRO%2FwvPtR0DOqZ4rjAinHvHk8MeNjWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eebb8c5e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5222,"size_decoded":1972,"mime_type":"application/json","magic":"JSON text data","md5":"050519d102f8e22de9ced30db5fff9c7","sha1":"1013c4e5835f18f1d0f21f3d88dac80f762bef3f","sha256":"452b3a7665aca8936478a5402b429a5d1ec4384d088b8a2072fc5732ca21ff11","sha512":"9e365022d014a632840d7dd49bca5097c97da99af375cfd545f83c872b9305cb196cf166106b413e54e145588218c1568fe2e9bc85ee7927285da15afa5388b0","ssdeep":"96:bvA0f2hithf+CR+rtFBaA+Fbvom+Kv2+dR16ejP+Agy+iL+hoGhz+oRY+zCuy+n4:mh/sFbC8dH6eSh5XRAo1zdoIy","tlshash":"15b149065128e55f58ae58db409fbda8c1fea30b30d0cd5968368f8d5c2dd7a3c9f02a","first_seen":"2026-09-02T01:59:37.924241Z","last_seen":"2026-09-02T02:03:26.220545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/5b6f24a36f1b4f179bc330e6d8a50617.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.860Z","timestamp":1788314546860,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/5b6f24a36f1b4f179bc330e6d8a50617.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6431\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B35A61C6313595E2C8\r\nAccept-Ranges: bytes\r\nETag: \"914432BC8512639EBE9B0C30D977C8D3\"\r\nLast-Modified: Thu, 23 Oct 2025 15:04:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12312116046241862990\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQsAEYgYCAgNOyxtAZIiBiNWU5ZWNhN2ZmNDc0OGFhYjI4ZmE0ZmQwOWYyYzhkMg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: kUQyvIUSY56+mwww2XfI0w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6431,"size_decoded":7094,"mime_type":"image/png","magic":"PNG image data, 89 x 88, 8-bit/color RGBA, non-interlaced","md5":"914432bc8512639ebe9b0c30d977c8d3","sha1":"f9d0b66acb579518e7006bdc84b04e7a873e9bd5","sha256":"4a09db2e7451e082b6eaf862a39a9d6a562cdf13e36f83574918cf5a371bd379","sha512":"fde1cfc4b66167091ac4308f3d0747f9f38e3d815509da9548eb393812d3c586d3259fa74f113adb2e0b5c3ebe372769139bcc6ded63e2301072290a6f8f19a9","ssdeep":"192:siZgovwaA7P+02duymLa72yTJ8C6+Jicn+:sBAwPmuYP84i","tlshash":"cfd18d9346a0ba63eb15501dd9acc160d1744030b18f4bd1f3549fa4aa84ccac66d27e","first_seen":"2026-03-17T06:00:28.273287Z","last_seen":"2026-09-02T02:03:26.221179Z","times_seen":13,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":507,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/8ee30e0dfc5746aca91938b2580c1fdd.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.032Z","timestamp":1788314546032,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/8ee30e0dfc5746aca91938b2580c1fdd.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15438\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B378CEA833323974A6\r\nAccept-Ranges: bytes\r\nETag: \"79B79CCEF76E3587425842E7C97F5019\"\r\nLast-Modified: Thu, 09 Jul 2026 23:22:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2872402674734866604\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYDAnNPhpPoZIiBiMGY2ZGY5YTIzOTc0ZDAyOTY3ZmQ5MzU1MzkyNzFlZQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ebeczvduNYdCWELnyX9QGQ==\r\nx-oss-server-time: 8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15438,"size_decoded":16101,"mime_type":"image/png","magic":"PNG image data, 521 x 521, 8-bit/color RGBA, non-interlaced","md5":"79b79ccef76e3587425842e7c97f5019","sha1":"d90df87c8b184fb5737df55aa0046234fb22df00","sha256":"28cd20a0fcf6b752bce2418e6cccb9247f15efc9e35d54e26f96400e8deebc06","sha512":"4ee4e6bd0952261ff41bed25fd24688959f33307bc9184926b7517fe5c1bdb68c0b8e86da9c8048052ff75f03b11fabd83924e601909aa71d3d738efc45af228","ssdeep":"384:je5zE1+/tt5Vt62Etg19gN36GISYF6PGsFcUjOlXTkSgVY0Kul8s4eU:C5w1+/tt5fJ0h2F2FcUjyTGVY0Kul81B","tlshash":"ca6248360ab1fb6b46b95a97099949df2a6c2cd350c0f73b0f9ed7069303b716b070a1","first_seen":"2026-09-02T01:59:37.859147Z","last_seen":"2026-09-02T02:03:26.221743Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1600,"timings":{"blocked":-1,"dns":0,"connect":267,"send":0,"wait":538,"receive":0,"ssl":795},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getCoinLogo","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.171Z","timestamp":1788314546171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/common/getCoinLogo HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lqf21ygm0zTd1fGTYyyrg1lghR8daxehEy8tL%2BhLf4hhgd%2FFvfUxj0y0%2BM4QvYtw8QOgdJfD95OUSrl1SpVt8rc34fQDxzzrsg7mHSqMjITd%2BgT%2B1tdy2MJPtXT99z%2Fq24WMtA%3D%3D\"}]}\r\ncf-ray: a348eeb99c4c56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":934,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/b80939ba53184db1b0dd972ade0d1876.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.001Z","timestamp":1788314547001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/b80939ba53184db1b0dd972ade0d1876.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22419\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B45A61C63135DBE3C8\r\nAccept-Ranges: bytes\r\nETag: \"16F8A6D690E6D9817A5D0F24BB194932\"\r\nLast-Modified: Sat, 18 Jul 2026 01:03:48 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5617742892628374674\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYCA1LmAy_sZIiAxMDMyMDkzOWM2YmY0ZGNlOTRkZThjOGExMmJmMGMyMw--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Fvim1pDm2YF6XQ8kuxlJMg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":22419,"size_decoded":23082,"mime_type":"image/png","magic":"PNG image data, 589 x 589, 8-bit/color RGBA, non-interlaced","md5":"16f8a6d690e6d9817a5d0f24bb194932","sha1":"5e923ca34fa7a44302d29cd48021b8b3f7e486bc","sha256":"42a83a4a4e8c3c50f0e72f94b4e6c939ee667ca9af9b020ab9209dfd7348d5bb","sha512":"b17a680246ba2c7a1adfcf60d5e1f608c967ab79c1af7ba649666a01576e9e739ef2d4ad69651b66bb772ce7975e070269f3d0f4922b723d9aa32407a58fe8ae","ssdeep":"384:XTmTEHHZg9+ekYIhVl1Rjj5hbKVa0ipDpxIzp5hsVxd8x5v9B8:EEHo+e25hOc3Ivh2P8z8","tlshash":"6aa2ae694ad5bcc7d09c861a33d78f6a68f02dae5042af3866b02750e4c8b4593f758f","first_seen":"2026-09-02T01:59:37.855459Z","last_seen":"2026-09-02T02:03:26.222534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1732,"timings":{"blocked":1451,"dns":0,"connect":0,"send":0,"wait":274,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/cacheKline","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.561Z","timestamp":1788314547561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"POST /api/cacheKline HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: GrKCBJtE+LLK37qQ2npcrlYDqZxIXUjsSmcb6YLiDqwlSYAOe2Dx3Z8tNWVMTJX+zEAKeo62/x7gK9SatCFTxhZgkgS10Jmbayt/bBZNNOb/b4zfHPkxZl31g/FkF4951FWN5f6RQCO2wCre8UOSn1h2ttLEdIYYpJHexifSnKwOM3QPegiNvUUp4l0r1kFPJM6r7n7h/Ev7PeBvJQEvmrUbbAm3ZuqBbAtaTMLUOd8d5KzAq/KnfoIqSBR3CPMsS5qL6lcpwHVJ5Odo75CNtTiVAQAKIWYXCgFO4Lqe9E0I+O9qRjijYVRH2xYOMDkaPpgrNIi5dqAo568dXqHB0Q==\r\nContent-Length: 1113\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1113,"data":"[{\"coin\":\"btc\",\"coinType\":1,\"referCoin\":\"btc\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"eth\",\"coinType\":1,\"referCoin\":\"eth\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"bnb\",\"coinType\":1,\"referCoin\":\"bnb\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"xrp\",\"coinType\":1,\"referCoin\":\"xrp\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"sol\",\"coinType\":1,\"referCoin\":\"sol\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"smpr\",\"coinType\":1,\"referCoin\":\"smpr\",\"referSource\":\"custom\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"allo\",\"coinType\":1,\"referCoin\":\"allo\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"rlyd\",\"coinType\":1,\"referCoin\":\"rlyd\",\"referSource\":\"custom\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"bank\",\"coinType\":1,\"referCoin\":\"bank\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"sapien\",\"coinType\":1,\"referCoin\":\"sapien\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uo6pwyGPaNsEuur5l8vm5nHL%2Fgm0mNfRuuTrUDldZIcbdWlt3AveWBteUa%2B61GAvJr7UwnYU%2BPSyvVkVmQI%2FuambQKqSWijTeAzYYix6LJ%2FK2LtdvgFZloxHLA3xshwk8nnhVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eec42c9456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187679,"size_decoded":25356,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6b6d5661d7eecab07f0ab3713c64c8d3","sha1":"906823931f9d4ae27c5ae8c899585bfb3101cda7","sha256":"28a08abbc87ec23df869591aa37100fb6a107d002fa190e2a672eaf18d537338","sha512":"ce4e4b6f62017acf73f8f280d3b8eb7e3703786fd274a8cdc586bed69282cbae8f66955f3753b852cae89457c380aa8c44e8c4dcbb5cde843e65349cc073e7a0","ssdeep":"768:cTQVKM3qC5+YkEALOje33plqWcd+fSnVsFEU+/VhOjjkCQyKP5BBt43bv1OMn0HS:ZL1le3","tlshash":"4a04860cc1858ed4617f6ee442927dd611ae729384810f5a02ea8f924de12f7b73f76e","first_seen":"2026-09-02T01:59:37.929284Z","last_seen":"2026-09-02T02:03:26.223248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":523,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/cacheKline","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.563Z","timestamp":1788314547563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/cacheKline HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, content-type, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yrB9osZSTSThPa%2BGXiYc9Nn36uAwOyfCWnzKrRfLYIlQ8K30CqEReYiPIpI3oPb%2F4ZAiVAPcoo%2FD3bZ7HxxZNIzPuk4p4kAa9V6qbhh4RBvURkXiwZB3SH0GU3hCw5LoMUDfQ%3D%3D\"}]}\r\ncf-ray: a348eec24c9056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":943,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/core/v1.21.1/js/app.02a721d8.js","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:27.998Z","timestamp":1788314547998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /core/v1.21.1/js/app.02a721d8.js HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Dec 2025 07:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHItxj6ajutPFa7A1VRURZK4SdtcgY%2F16Ee3IYlfwfiNvKi8rzitwniuSi6kHfQuNqvl2F%2B3OovfHgtpKVkIaalWS72g62622mC6pm19CJReU%2F7RT3N9vwg1Irx4BfU%3D\"}]}\r\nage: 243\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6954d562-31d09\"\r\ncontent-encoding: br\r\ncf-ray: a348eec4ff05b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204041,"size_decoded":60703,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60335), with no line terminators","md5":"c53588a284d62a682cf64fa8ad4225e5","sha1":"ddc321e65d678d0969e2d10463d3ae83dfdbb7a7","sha256":"5a7b76423b7ca6dacb0f9050e43dfa4e66a378dfc04fcb90c04e884d280a107c","sha512":"62d125135e7ad732d862771a4c9293cc297387b233957fff270dd61cd4242dffb04651e6c1fcb4050a5b414e3dbd40652f354221481f1c1c0054aaa7d414fbba","ssdeep":"1536:dOs5M7DJnznkHZ2vZXf6rcNWCvnGpO2sNqF0CwPj1gDzoYKz2kB7cC+9ZFgLBxRe:BMZwmpQ5FW71gDzoY+xDchJZvWw","tlshash":"9f146ba810e41479d36e439391ee36082dfc3a9778c08cd4badddcd517ea8dc5213b9a","first_seen":"2026-03-21T03:01:26.960114Z","last_seen":"2026-09-02T02:03:26.223991Z","times_seen":13,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/cacheKline","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.568Z","timestamp":1788314547568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"POST /api/cacheKline HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nAuthorization: \r\nSatoken: \r\nlanguage: en\r\nlang: en\r\nsign: DCYp2skbyyS1CZi/K3dC51YlKhaJ3+aXkGMc6Bzm/xM58m69bYDcjNIWUPadR2tMyuBygauEuNz/iSrQ+jPuBBKyl5zvXTUwwvXDOXkgIFylP2BqUoPJpN9lOVzd9iWFpbyCCyBPo4ExSWfH3w7SFs/roiAvm8j6D16ZoajVfaTqzNkiNdF/TRIeFcm0qCAmK/zB/Ppx2atiWEh8dFkk886xdev1V8LlukBLMcGxjrxk+VDzXJRA/k1WrG7CnLSsOX1YN1P4cY9FmV5QQYGldeiUCoQfvi1WZWYMJfjOMSUbyNu22I3Bp3pNu7MPN+PQFZbO0DO2y4MbFqlEHR+1MA==\r\nContent-Length: 1113\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1113,"data":"[{\"coin\":\"btc\",\"coinType\":1,\"referCoin\":\"btc\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"eth\",\"coinType\":1,\"referCoin\":\"eth\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"bnb\",\"coinType\":1,\"referCoin\":\"bnb\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"xrp\",\"coinType\":1,\"referCoin\":\"xrp\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"sol\",\"coinType\":1,\"referCoin\":\"sol\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"smpr\",\"coinType\":1,\"referCoin\":\"smpr\",\"referSource\":\"custom\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"allo\",\"coinType\":1,\"referCoin\":\"allo\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"rlyd\",\"coinType\":1,\"referCoin\":\"rlyd\",\"referSource\":\"custom\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"bank\",\"coinType\":1,\"referCoin\":\"bank\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0},{\"coin\":\"sapien\",\"coinType\":1,\"referCoin\":\"sapien\",\"referSource\":\"binance\",\"market\":\"\",\"country\":\"\",\"symbolType\":0}]"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8XSFhpVa7wPF7M20D3xTmvyUXxcmGuvRCqnV6cQ68dLjd%2BD9ygIwKw9BLKykSsAJQfixpFjoauZOgFJ9kSA%2BOX5Lln%2BXOaAdeiuKnn%2BahULISKCSQNP%2FJsEmQJdPczDauH0sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a348eec41c9356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187679,"size_decoded":25356,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6b6d5661d7eecab07f0ab3713c64c8d3","sha1":"906823931f9d4ae27c5ae8c899585bfb3101cda7","sha256":"28a08abbc87ec23df869591aa37100fb6a107d002fa190e2a672eaf18d537338","sha512":"ce4e4b6f62017acf73f8f280d3b8eb7e3703786fd274a8cdc586bed69282cbae8f66955f3753b852cae89457c380aa8c44e8c4dcbb5cde843e65349cc073e7a0","ssdeep":"768:cTQVKM3qC5+YkEALOje33plqWcd+fSnVsFEU+/VhOjjkCQyKP5BBt43bv1OMn0HS:ZL1le3","tlshash":"4a04860cc1858ed4617f6ee442927dd611ae729384810f5a02ea8f924de12f7b73f76e","first_seen":"2026-09-02T01:59:37.929284Z","last_seen":"2026-09-02T02:03:26.223248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/ossfile/forever/SjDcQcOZ/messageLogo/20251128/phugk73703mc9p84gil3.png","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://msg.bthdya.cc/core/v1.21.1/#/?appId=SjDcQcOZ\u0026deviceId=f58d2670994742e38e54734db00517e7\u0026groupId=\u0026isMobile=false\u0026lang=en_US\u0026svrlang=en_US\u0026userId=\u0026popUpUserStatus=true\u0026nowDate=1788314547623","date":"2026-09-02T02:02:28.665Z","timestamp":1788314548665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"GET /ossfile/forever/SjDcQcOZ/messageLogo/20251128/phugk73703mc9p84gil3.png HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://msg.bthdya.cc/core/v1.21.1/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1642131\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-oss-request-id: 6A94C8513EADDD3233FDD01F\r\naccept-ranges: bytes\r\netag: \"DC13D802DF59D21924E9D5EB3D30C01A\"\r\nlast-modified: Fri, 28 Nov 2025 00:46:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7511784026274278665\r\nx-oss-storage-class: Standard\r\nx-oss-version-id: null\r\ncontent-md5: 3BPYAt9Z0hkk6dXrPTDAGg==\r\nx-oss-server-time: 44\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\nage: 242\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQd4FAPKNTqoPwLdMPpa4Z1Hm6V8C%2FZE2RYBRLD8TabXYbDlmFECRM9ja5%2FK%2FhLK8rq00PmT4mCEZnvfd%2B2J9E%2F6h0SmER9wsi9OiXj9T3lAeB8I2loZJ19lf9UvLwM%3D\"}]}\r\ncf-ray: a348eec92845b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1642131,"size_decoded":1643229,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"ed93962fae01d1340f408bcdf399f6ff","sha1":"d59a86f842d2c8a7b742c787d92493595026e025","sha256":"b1165d9a524f4d34ea176161317451332040b39a12c77ff560506bb11d1bceb6","sha512":"d7bc9acfd0b1bd8172645455e90b62576e0a89b97ea4fc70633d6eb6f40018162a012b41c28ac6cf04b8ede3338aa4a48ab2b0867bbf94df179321ada72388eb","ssdeep":"24576:rQmI05pN2IJw25Tx4mallId336boStgFFOIcLOdDc9:rA05pNBwel4m6lIn6bozeUDc9","tlshash":"522533b8b7c04323ea47a5b8692f3e664f151a9034e4269bbc234d09539cf74894f97f","first_seen":"2026-05-03T23:32:54.580489Z","last_seen":"2026-09-02T02:03:26.224857Z","times_seen":9,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/4c9dfd30c81d4efeb9c0e9e6686c673c.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.037Z","timestamp":1788314546037,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/4c9dfd30c81d4efeb9c0e9e6686c673c.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2350\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4A705D0303335725B\r\nAccept-Ranges: bytes\r\nETag: \"77934D6CEB41D2DCCBE345F701660E4F\"\r\nLast-Modified: Thu, 30 Oct 2025 11:06:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16505359623426249131\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQtgEYgYDAmZ6Z09EZIiA3NDZhOGVmOGFmNTQ0NGQwODlmMjAxMDE0NWI3Y2FkMg--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: d5NNbOtB0tzL40X3AWYOTw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2350,"size_decoded":3013,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77934d6ceb41d2dccbe345f701660e4f","sha1":"5b6f189339f8930b799597ad0d35976f1719f17e","sha256":"946d07494e958b9f6da4701a4d242fb6123b07b8197f89d7a63f3395b63b07c6","sha512":"b40ddc2b6f83d298a7773178aa3a0c29dc323bb3f95001a43267ff58c7a910ac0e2ff355be6253fb296c468950bf544b0cfbfcb53428e00a742e2d30a5ff8e42","ssdeep":"","tlshash":"4b413ba8b7705c7d69675228600d5b87ccc40a0ebf9f910d5e34863db93f209d483e4a","first_seen":"2026-03-17T06:00:28.293775Z","last_seen":"2026-09-02T02:03:26.225416Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2298,"timings":{"blocked":-1,"dns":1,"connect":255,"send":0,"wait":256,"receive":0,"ssl":1786},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/EU136wIDX6VX7lZbu5mFz5DN1qs=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2255831228-ca95dcb6cf124ee6879069f7f6245f0e.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.612Z","timestamp":1788314547612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/EU136wIDX6VX7lZbu5mFz5DN1qs=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2255831228-ca95dcb6cf124ee6879069f7f6245f0e.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114810\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2460477\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"35164800e6b135726ac9d45c3be54ca0\"\r\nexpires: Tue, 04 Aug 2026 18:34:29 GMT\r\nlast-modified: Tue, 04 Aug 2026 14:05:59 GMT\r\nserver: cloudflare\r\nx-amz-id-2: YwPhu6x8PoqLik9DteWq3zPfY7Aun2fnJIJVhAtJME3K+g85dr94qVjbmeE5+gaLrYdtT+3rcoxfHLQ+s7G39xfVFtHmh9Kx\r\nx-amz-request-id: 1416E4X2JZ839F6K\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=pXBDAEIQvPAwtpwK4ODN.iaIh9JmqD3pKsKAmu0OyoI-1788314547.6387653-1.0.1.1-izUnMA1W8VyAp8TIEx6qR1v5LyOshXAfM1StO_mOEBKquN4LqnTFhAxD660IcFNqDKP1uYp8Ps2uP7rzqFI1UV9CQjzFp65EbD1nZAU1520hhFD.GHfu47i.PMbMLiQ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd110b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"pXBDAEIQvPAwtpwK4ODN.iaIh9JmqD3pKsKAmu0OyoI-1788314547.6387653-1.0.1.1-izUnMA1W8VyAp8TIEx6qR1v5LyOshXAfM1StO_mOEBKquN4LqnTFhAxD660IcFNqDKP1uYp8Ps2uP7rzqFI1UV9CQjzFp65EbD1nZAU1520hhFD.GHfu47i.PMbMLiQ3","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=pXBDAEIQvPAwtpwK4ODN.iaIh9JmqD3pKsKAmu0OyoI-1788314547.6387653-1.0.1.1-izUnMA1W8VyAp8TIEx6qR1v5LyOshXAfM1StO_mOEBKquN4LqnTFhAxD660IcFNqDKP1uYp8Ps2uP7rzqFI1UV9CQjzFp65EbD1nZAU1520hhFD.GHfu47i.PMbMLiQ3; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114810,"size_decoded":116101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"35164800e6b135726ac9d45c3be54ca0","sha1":"a6da6ba0414ab188f2fd51e65e0bfdb7501f4766","sha256":"3e3f2cb8cff7f0871b85981bb5b756231983cec3d10d3d690b33d9cafabcb105","sha512":"388255cd556549cb2256f5a6098e157ff821ed4438afdad474ef819fe5b34bbf92ab3e1ab5a2db9732b9c84b10586c8d332debdfdec0358af4292fc56b5355e2","ssdeep":"3072:r13xQoqpuKfMG2/QF0Pmgyaxcsa2iYnh4pQYo01:pGOKfi/KWmgyaxq2PGQYV","tlshash":"bab3127854d8ab6bcf6a7599256c04a001a7d932c5fde74c1fe4ec4fb41aa613e38d03","first_seen":"2026-08-09T21:36:39.64222Z","last_seen":"2026-09-02T02:03:26.226Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":0,"send":0,"wait":22,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/8ee30e0dfc5746aca91938b2580c1fdd.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:28.838Z","timestamp":1788314548838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/8ee30e0dfc5746aca91938b2580c1fdd.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15438\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4C961DA3631B64557\r\nAccept-Ranges: bytes\r\nETag: \"79B79CCEF76E3587425842E7C97F5019\"\r\nLast-Modified: Thu, 09 Jul 2026 23:22:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2872402674734866604\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYDAnNPhpPoZIiBiMGY2ZGY5YTIzOTc0ZDAyOTY3ZmQ5MzU1MzkyNzFlZQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ebeczvduNYdCWELnyX9QGQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15438,"size_decoded":16101,"mime_type":"image/png","magic":"PNG image data, 521 x 521, 8-bit/color RGBA, non-interlaced","md5":"79b79ccef76e3587425842e7c97f5019","sha1":"d90df87c8b184fb5737df55aa0046234fb22df00","sha256":"28cd20a0fcf6b752bce2418e6cccb9247f15efc9e35d54e26f96400e8deebc06","sha512":"4ee4e6bd0952261ff41bed25fd24688959f33307bc9184926b7517fe5c1bdb68c0b8e86da9c8048052ff75f03b11fabd83924e601909aa71d3d738efc45af228","ssdeep":"384:je5zE1+/tt5Vt62Etg19gN36GISYF6PGsFcUjOlXTkSgVY0Kul8s4eU:C5w1+/tt5fJ0h2F2FcUjyTGVY0Kul81B","tlshash":"ca6248360ab1fb6b46b95a97099949df2a6c2cd350c0f73b0f9ed7069303b716b070a1","first_seen":"2026-09-02T01:59:37.859147Z","last_seen":"2026-09-02T02:03:26.221743Z","times_seen":4,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/menu/getSideMenu?lang=en","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.169Z","timestamp":1788314546169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/menu/getSideMenu?lang=en HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZ6pFQJUfgM%2BJ9hh8Yk6Fil4QDtVypkxaruYjjgN9OQcLHTTlIzKv2JnOVXkFESjPeaaTrRLP6Lok9b0QFfVONFfvT4YNw1oEwmABMt0qHb1Th8%2B7FsR2OMOP0qokUzVUliwTg%3D%3D\"}]}\r\ncf-ray: a348eeb98c4a56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":926,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/platform/stable_0709/logo_144.png?2.0.1787684176847","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/","date":"2026-09-02T02:02:20.460Z","timestamp":1788314540460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /platform/stable_0709/logo_144.png?2.0.1787684176847 HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZfpQHnQw8jaGOjitaWjoUJoDaID7co6MLpA3iv8J748ghV0mNWwLhHbQXOaBKF0fwQsM8jyO%2FNdcJy0SkHA6Oi290yBEUK7DfkJe%2Bzbe24XTNjqCWiGobzJsRBijta1xQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a348ee95d83856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":710,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-03T08:19:31.451158Z","times_seen":320378,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/news/list?pageNum=1\u0026pageSize=10","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.153Z","timestamp":1788314546153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/news/list?pageNum=1\u0026pageSize=10 HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHtO9CW0CxQlp%2Fi2hk9RW0wXbi%2B7REC0JZj07f%2BNMupG9coBUTm5nqGjTBY1CtviUUJbX5Re%2F9PfZZ2omezH%2Bj7Lekvwn6fCMzzRlxmn7cRXb%2Bpfdu3ZoE6a00J6%2FAVnbj18iw%3D%3D\"}]}\r\ncf-ray: a348eeb97c4356ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":936,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/37577e8292614830b8214f40bd3454ae.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.868Z","timestamp":1788314546868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/37577e8292614830b8214f40bd3454ae.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 524\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B3F4F67537333452F3\r\nAccept-Ranges: bytes\r\nETag: \"F31CFE319D4E390CC724D4778955BCA0\"\r\nLast-Modified: Mon, 13 Oct 2025 08:51:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8636480593863858454\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQqgEYgYDA7MOJ884ZIiBhMDY2NGQ5MTEzZTU0OTQwODA4YmNkOTM0NDZkMDMxNQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8xz+MZ1OOQzHJNR3iVW8oA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":524,"size_decoded":1185,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"f31cfe319d4e390cc724d4778955bca0","sha1":"9c3ed7fa15ef70db6011293f5585c4ab09bd3c53","sha256":"be7c8a3eea51781d8de71f3d38d845d51a176fe196f657e8274a05504c42e374","sha512":"53ceeffeb68e4a99409efcb91aa05aa5024f9458aa63fd345c6db8752d61483a4d6bdb4064cf0941cfc095e80d1acb95ecdb256aebc41a73d3be4286dc5c2fbb","ssdeep":"","tlshash":"1af0055165d9586e073d48a41c230655d1f7aa21cb44110d940b34f7bc515dbf5a21b7","first_seen":"2026-03-17T06:00:28.241573Z","last_seen":"2026-09-02T02:03:26.226498Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":778,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.investopedia.com/thmb/0t6hpofoiKM08nObDqgJj7z1Xso=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2288300954-63700c51e73c48a9afcb153f764f3d16.jpg","fqdn":"www.investopedia.com","domain":"investopedia.com","tld":"com"},"ip":{"addr":"172.66.1.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.613Z","timestamp":1788314547613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investopedia.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 16:48:36 GMT","end":"Thu, 12 Nov 2026 16:48:35 GMT"},"fingerprint":{"sha1":"86:9F:C0:F3:D5:31:A5:87:A5:3F:0D:38:85:B6:D9:C5:67:64:1E:FC","sha256":"66:0A:69:8D:05:A2:DD:7C:21:36:02:30:DC:90:F3:0F:93:AF:8F:A8:54:79:EA:83:38:10:20:2B:1B:FD:4C:EF"}}},"request":{"raw":"GET /thmb/0t6hpofoiKM08nObDqgJj7z1Xso=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc():format(webp)/GettyImages-2288300954-63700c51e73c48a9afcb153f764f3d16.jpg HTTP/1.1\r\nHost: www.investopedia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 02:02:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101420\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 2439497\r\ncache-control: max-age=31536000,public,no-transform\r\netag: \"ab04d1006045c84f4eceecc90073f330\"\r\nexpires: Wed, 05 Aug 2026 00:24:09 GMT\r\nlast-modified: Tue, 04 Aug 2026 12:32:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 1ZJGxg2CEeECeUl5JRFL1EvkeTYjUUbLqtvKLd4TyXIei7GDlGZu+edTo7wBubQDdfsNg2fqxgw=\r\nx-amz-request-id: PA12NZJ329ZTJFE6\r\nx-connection-protocol: HTTP/3\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=iQc5BTNnBdl_.sA.PhpMBnY_.KcIIJ8rcXAJM4W_46M-1788314547.6388695-1.0.1.1-5zppzTQkqXjLGwklFNvwfnG6uhQgvmo1qRjUu_5FNXTlzK3pyl_yBSCbk9QxfrtrExvK.H50imUJq88q_7XRt3wdm3tO5d1Bx1glF_IsB6C5RgJqShF0X3NdSb4iu6tT; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":2592000,\"success_fraction\":0,\"failure_fraction\":1.0,\"include_subdomains\":true}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://rjs.3gl.net/hawklogserver/555/re.p\"}]}\r\nx-robots-tag: noai, noimageai\r\npriority: u=5,i\r\ncf-ray: a348eec2bd100b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"iQc5BTNnBdl_.sA.PhpMBnY_.KcIIJ8rcXAJM4W_46M-1788314547.6388695-1.0.1.1-5zppzTQkqXjLGwklFNvwfnG6uhQgvmo1qRjUu_5FNXTlzK3pyl_yBSCbk9QxfrtrExvK.H50imUJq88q_7XRt3wdm3tO5d1Bx1glF_IsB6C5RgJqShF0X3NdSb4iu6tT","quoted":false,"path":"/","domain":"investopedia.com","expires":"2026-09-02T02:32:27Z","raw_expires":"Wed, 02 Sep 2026 02:32:27 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=iQc5BTNnBdl_.sA.PhpMBnY_.KcIIJ8rcXAJM4W_46M-1788314547.6388695-1.0.1.1-5zppzTQkqXjLGwklFNvwfnG6uhQgvmo1qRjUu_5FNXTlzK3pyl_yBSCbk9QxfrtrExvK.H50imUJq88q_7XRt3wdm3tO5d1Bx1glF_IsB6C5RgJqShF0X3NdSb4iu6tT; HttpOnly; SameSite=None; Secure; Path=/; Domain=investopedia.com; Expires=Wed, 02 Sep 2026 02:32:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101420,"size_decoded":102691,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab04d1006045c84f4eceecc90073f330","sha1":"d461f3da204b215a4d69b1a918e99f8679626530","sha256":"68cfaad4a1281111bddebb77d4f932f941a500637ef853d3f50ecbeaac5c82e5","sha512":"0e9447b38d492d335e0ae75302cdb6a8de0d1e800fad3fb4f9073b880909b7c7afdd72c0b6fd4bc6b81cb004515c3e0793446394d42da5937a0b37d2110bc4b3","ssdeep":"1536:WCXUBB2lA7bcXxU6kErEkVuRMkwPFNTyezHhlcxwTESblSIuOsLsTCXJK:NIklnBgAEkVSM3HDcq7lSIEsKK","tlshash":"dfa3122148ac31d3700952366eba46f8ff2b73657b8aeca52391db95ffe4797008c416","first_seen":"2026-08-09T21:36:39.702594Z","last_seen":"2026-09-02T02:03:26.227Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/Background_Border%20(2).cbb05f80.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.086Z","timestamp":1788314546086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/Background_Border%20(2).cbb05f80.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-8889\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ewZVIUM2wjuFiNJ0XWyy7L6IGecZoKn8WV1jatzd42C585hHZt1SX9uAKobtX8lFevKlm2fTLlV6sTn%2FSWpyGryjn3QDfjBK9vZ5IiERfLx8VyI6Fw7PaEkAtS226zQsg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb908ac56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34953,"size_decoded":35719,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit/color RGBA, non-interlaced","md5":"736f4326495d937d15a7ca371b5c52a3","sha1":"dae64d154ddd1d6bfb55f4f56f156ffbb6aeb4fe","sha256":"cbb05f80bbe351c4a567933e6c48e55a8681128946f87c14eb5ca25a28ad7135","sha512":"0b11ea9b9add16279b9d90234c316501f4d9584a7c7ae4f40205397c4d22a24d8741d5f936137c17ed04c7f6711e6a9a9690ef8441a4ee0c43918ec0a3720659","ssdeep":"768:C56/GdhB7uYhesyOABynkDXuSgdpYTqK6ZGshkfMiWobSCqTC:w6/GdhB7u4e2ABynkDezB5PwJWZvTC","tlshash":"60f2f17fd53a0ff6dee89d022ceb653e0803c34a9baada5384f1e654041275b25087de","first_seen":"2026-03-17T06:00:28.294708Z","last_seen":"2026-09-02T02:03:26.22759Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/ae206267b58d4b1eb4ea2af95dd57a33.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.869Z","timestamp":1788314546869,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/ae206267b58d4b1eb4ea2af95dd57a33.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3019\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B370C11435303A4711\r\nAccept-Ranges: bytes\r\nETag: \"7D46FC9E7A5EDA337D1E6C1FC69AD7EB\"\r\nLast-Modified: Tue, 06 Jan 2026 04:03:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10762556044193416729\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQvAEYgYCA6KPyxdwZIiBjOTlmMWMwNWI1NjA0MzQ2ODBiNzVkNzhlNjFhZjljZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fUb8nnpe2jN9HmwfxprX6w==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3019,"size_decoded":3682,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"7d46fc9e7a5eda337d1e6c1fc69ad7eb","sha1":"6d804d7e2d525072f72982c4c4e280f4e5fe4d01","sha256":"f1bba5470a5f99ee01a31ec41822d96cec18e2f7af59ca3a0938e24c9ac9bb72","sha512":"f809f02be019ede66f40bb10d2ad760f23c27204a1ad9d95a05c09b8f4eedd6dc7f83b5a541659ac0544fa5c5dab2050dac3b9f6263d236c0c1084a716f528e4","ssdeep":"","tlshash":"21515d929d523c435c3f94768be1f954e3547796283ac31786f4d430e724a4e6acb14a","first_seen":"2026-09-02T01:59:37.876301Z","last_seen":"2026-09-02T02:03:26.228085Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":987,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/language/checkLanguage","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:27.623Z","timestamp":1788314547623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"POST /public/user/language/checkLanguage HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nlanguage: en_US\r\nappId: SjDcQcOZ\r\nContent-Length: 20\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"appId\":\"SjDcQcOZ\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:28 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=god0rY91mlqMfXADDg7%2FEYsr%2BwGMURTRXs658BBR9J6nx%2FWIxl9wqvy2dJX7LCtOcJbPpCClpCBFE4V47c5XssaOgqurevaqHPDZWnss2c4tJyXZNZklZlCDoQkY6Z8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a348eec47e6656cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":703,"mime_type":"application/json","magic":"JSON text data","md5":"88cad4f49fd0a4ec576cda7a5c6704d2","sha1":"d94538417181113fe41fcca1d6f73ddee114c43c","sha256":"6f83aa52d760ef4983b3828bfeb5d25b9846fc940ee74730089bf32a00dfaf91","sha512":"ce0d67230966d93b4b153bc3eba10b4d4a50e2197097ebe9962d03f13cd40e198ed98df08ada52def0237be92a74799ca0329de5aa3599d63543a7cec5da3ca3","ssdeep":"","tlshash":"cb900211950d58e36d1124c4190c070010e821804140ca00cd4c6254c9090666041520","first_seen":"2023-12-02T21:57:17Z","last_seen":"2026-09-02T02:03:26.186406Z","times_seen":17,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.bicokt.vip/api/common/getLanguage","fqdn":"h5-api.bicokt.vip","domain":"bicokt.vip","tld":"vip"},"ip":{"addr":"172.67.200.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:25.122Z","timestamp":1788314545122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bicokt.vip","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 08:44:03 GMT","end":"Wed, 21 Oct 2026 08:44:02 GMT"},"fingerprint":{"sha1":"25:27:A8:2D:8C:E8:AF:DA:89:75:D1:61:D5:C7:F2:C6:3E:C3:90:8A","sha256":"F3:97:4C:CD:F0:01:ED:D3:71:AA:8F:36:51:24:2A:C1:EB:A6:BE:B2:90:8D:FB:D9:08:DD:2E:32:67:11:A0:9D"}}},"request":{"raw":"OPTIONS /api/common/getLanguage HTTP/1.1\r\nHost: h5-api.bicokt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken,sign\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:25 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken, sign\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7K21zrM5aHtZpglhxoiW7VIl94BXxn5u68MijGvpEfCLbLqq6fmCx7B6hyLpj7agisJ5OgTwWG1qSWy4Gd4PE4n9kxkBj0lfV54hpyHHXgqMjjg3Ex1mutPlDbqQy8hqFLai6Q%3D%3D\"}]}\r\ncf-ray: a348eeb30c0056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":923,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/8c5105b9a54547a3b54d5c1a293c4d35.jpg","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.049Z","timestamp":1788314546049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/8c5105b9a54547a3b54d5c1a293c4d35.jpg HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:27 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 164115\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B3C961DA3631A44357\r\nAccept-Ranges: bytes\r\nETag: \"D2747D85303239ACDD00922512CA4AF3\"\r\nLast-Modified: Sun, 26 Jul 2026 02:03:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17727713753623299299\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYCA6NrT8PwZIiAyZDViYjdkOGE3ZjE0MTg4YTBkMGJiMDYzZTdiMWRkZA--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0nR9hTAyOazdAJIlEspK8w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":164115,"size_decoded":164780,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, description=Signature: WrwTswUnZNrVqFrzKx7M+36I9BtdAIqpJ5X3a2xmAdPFNFxKZy2LK6WJKL+EO89sFf+TKwKMBo02GbDznE9UhreamXvFsmk6KhSXQ9s2VrSmUjIG8uqB], baseline, precision 8, 1280x720, components 3","md5":"d2747d85303239acdd00922512ca4af3","sha1":"9fc02d62581facd2e612e9b5e64af1bb5063a92d","sha256":"6df417afb2b108b16c3994f4d374c3d16bf022c30b132794a2071b56faacb815","sha512":"1543c23f80c0c309c949230237ed92461d5b306a1fd9b93b985de7a3fb4119c20a6c94026866cd6f80a98010992231b2e7e08b13337960a42675fd024d34e3cf","ssdeep":"3072:k1tjXjngTIfXfhaz2oRrSKdXyz+m3uMZf/VSM3t6oxsrmR:k1tv8OXczfrSKd++m+M1nJxsw","tlshash":"63f31283d0b4496dd920b23d02d63e50a37169e1f0678aa42f68747efe23d948bd479f","first_seen":"2026-09-02T01:59:37.891097Z","last_seen":"2026-09-02T02:03:26.228657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2039,"timings":{"blocked":1258,"dns":0,"connect":0,"send":0,"wait":269,"receive":512,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/resource/images/dark/zaixiankefu.svg?2.0.1787684176847","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.093Z","timestamp":1788314546093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /resource/images/dark/zaixiankefu.svg?2.0.1787684176847 HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55c4-46f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpD5tb6EoVhYPOF1LA2KJHmiNAVZJtyKaYronolQW5nT0hrFMqJaVobFQSbhr7H4DF47xb9V%2Ftg%2BLK0DtgTBYlwS6mutLEtX7PL%2BmWNM6vIlMVgzpgoh0ynEnJxgJ2f7zw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a348eeb918b256c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1135,"size_decoded":1311,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0853a2f4edf1806d09310aed35adc4b7","sha1":"b00ae35f1a36c64dfaf5f235ae21183233f2718d","sha256":"5c99daa5b9c08bc479e22958ac225c364399f98a6be84e2d6ecc7191f61e19c3","sha512":"2f33663ba3f75b2b4faaa4f87fd190852229ace1d9e81665256e5783eda9cbd7ed8e8e1fb7c3be3317fb193f0641a50454495554f3a862914b66c11ddc092254","ssdeep":"","tlshash":"2e21abbe82f756fca80b61925e1e4011782bd0b2f044e0c4b5fe65a26b18cf7482d2b3","first_seen":"2026-09-02T01:59:37.873856Z","last_seen":"2026-09-02T02:03:26.229316Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.134Z","timestamp":1788314546134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Fua7xpAfdBxbfmSfzRJpJuO%2FlvXeVDgvioiRS34MdiT%2F%2B3Xe8sfjQYhPKhqWlNcMGf8Y%2Br%2FTQGZ4R1krYuRYSIiKufRZ4g8sF1Wi5W2zFtPB6Tm6Yte33FyTPoZ7kM%3D\"}]}\r\ncf-ray: a348eeb95ae756cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":618,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.bthdya.cc/public/user/userInfo/messageInfo","fqdn":"msg.bthdya.cc","domain":"bthdya.cc","tld":"cc"},"ip":{"addr":"172.67.73.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.138Z","timestamp":1788314546138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.bthdya.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 07:16:05 GMT","end":"Tue, 20 Oct 2026 08:16:01 GMT"},"fingerprint":{"sha1":"03:AD:A6:0F:E7:09:6C:4A:B4:01:AF:84:19:8E:F0:F4:DE:FA:1D:E4","sha256":"BF:99:79:39:28:0E:DD:97:12:9C:B9:C6:84:07:00:18:86:F0:5F:F3:4B:31:F1:29:1A:F3:4A:CC:A1:36:E3:12"}}},"request":{"raw":"OPTIONS /public/user/userInfo/messageInfo HTTP/1.1\r\nHost: msg.bthdya.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: appid,language\r\nOrigin: https://basetructcc.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://basetructcc.cc\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ehh6x%2F7jpBGtv8E%2BjM2eUuqu%2B5wbfk%2F2o0R%2BqC2d4v854QleAvrqymcFUatMcrmgCNK5W%2FPRg0QpuVzACQoTiSeht4dvkKUFHjCjQdojGi6JrHRGEWaQWJbLhu0b5EI%3D\"}]}\r\ncf-ray: a348eeb95aeb56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":618,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T08:18:07.215245Z","times_seen":18252408,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"msg.bthdya.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/resource/fonts/PINGFANG-SC-BOLD.ttf","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.119Z","timestamp":1788314546119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /resource/fonts/PINGFANG-SC-BOLD.ttf HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 02:56:04 GMT\r\netag: \"6a8e55c4-a9f954\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 166\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wCN3QDIGCwW6BEn%2BCfkYjABa096kbVcoCmV%2FZnffYRAQ51m0w%2F44w7Oi2N3Qtxp7otsSlttScMRNfA0i4P9CyUYRg03ylcElDWfMEowZDYO0SYpMaN1J53R9fTCaLjyqIA%3D%3D\"}]}\r\ncf-ray: a348eeb938b356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11139412\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11139412,"size_decoded":11140180,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa2b728","md5":"a5f40309207afeb657ed9436536d0d0c","sha1":"e08b67e9d2d1836268cdc905d4a7bc8aaf46d583","sha256":"b03430452ce3669613d60acaf8d799052aa1fdc03012feb481b5a27fe8a89fb8","sha512":"2a5d9eaeec304955d870d9e68b8efeb3a9ed268b1922a8750cc2fbc79b1eafbfde68f74b6dbddaae97950f0f722790d6a24ccda0c5e28ec0f5a7d252f9fd68f3","ssdeep":"24576:Jk3368WWqmO8+RYKjcpbR8z0AuxRbTn1tET64wBQFFlUqIY7NMIbvW:Jk336M5BI1E","tlshash":"36256d93c7c47d2d9b22fe3c6410f26ff48e5409892ad2f9cf632f36185656449a8eb1","first_seen":"2025-07-29T21:26:30.322215Z","last_seen":"2026-09-02T02:03:26.229985Z","times_seen":91,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmm.oss-ap-northeast-1.aliyuncs.com/2.0black/lvzhou/501837cd78c34c1f8150903834c3e201.png","fqdn":"coinmm.oss-ap-northeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.82.130","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.998Z","timestamp":1788314546998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-northeast-1.oss.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 03 Dec 2025 08:27:33 GMT","end":"Sat, 02 Jan 2027 02:51:19 GMT"},"fingerprint":{"sha1":"C1:8E:34:B2:8F:15:B2:BA:DA:FE:F6:10:0F:E2:E3:F9:58:49:E1:F6","sha256":"EC:23:4D:91:A3:D6:50:A7:18:C2:E7:A4:CF:82:F3:82:8A:26:C2:83:6F:AD:E9:94:86:9D:18:13:D3:91:8A:E8"}}},"request":{"raw":"GET /2.0black/lvzhou/501837cd78c34c1f8150903834c3e201.png HTTP/1.1\r\nHost: coinmm.oss-ap-northeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 02 Sep 2026 02:02:28 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 22954\r\nConnection: keep-alive\r\nx-oss-request-id: 6A9783B4C961DA3631F24457\r\nAccept-Ranges: bytes\r\nETag: \"54AD87B3E98A737B9D478535CA4FFAEC\"\r\nLast-Modified: Sat, 18 Jul 2026 01:03:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11949161076137806932\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-version-id: CAEQ1gQYgYCAyvz_yvsZIiBhN2M5NWU2OWUzMDk0ODhkODBmMTgzNGYwYTMzNWVlNQ--\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: VK2Hs+mKc3udR4U1yk/67A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":22954,"size_decoded":23618,"mime_type":"image/png","magic":"PNG image data, 589 x 589, 8-bit/color RGBA, non-interlaced","md5":"54ad87b3e98a737b9d478535ca4ffaec","sha1":"f73fe594426992593d73d00b13116fc49edc61a8","sha256":"60412b7198b955a9a9459cb89ce6b649d22d0aae4e7d889111e7c358bd39dfff","sha512":"3635fc4d88b029429a70e328d9becdb79aef44108bdb4fd071d0ed2910cd5d61931188ea12b1033ce631e81667fadeb881afa2f5cde62db6abf43b1fb7f87aea","ssdeep":"384:XWHVRRwbEQo96pOb9sjY/ncaRslhK8K2a9xTBZefO9Rlih3n+GPZrGIHJPlJ8f9:WRRhQowobAmncaRsls8rcR3iFhP1DHJ+","tlshash":"1ba28c9a4b023dbde9728c8227456d555bf4602c81452ffb72ceeb23c5f462ce9ee105","first_seen":"2026-09-02T01:59:37.898693Z","last_seen":"2026-09-02T02:03:26.230485Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1633,"timings":{"blocked":1360,"dns":0,"connect":0,"send":0,"wait":266,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"basetructcc.cc/assets/home2.dde3f902.png","fqdn":"basetructcc.cc","domain":"basetructcc.cc","tld":"cc"},"ip":{"addr":"104.21.88.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://basetructcc.cc/#/home","date":"2026-09-02T02:02:26.023Z","timestamp":1788314546023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basetructcc.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 02:24:55 GMT","end":"Sun, 29 Nov 2026 03:22:28 GMT"},"fingerprint":{"sha1":"8A:C9:0E:77:1F:A7:27:C6:5F:25:D0:7D:80:27:A0:80:52:FE:93:B6","sha256":"B4:03:0D:34:69:7F:9A:27:59:14:E9:D2:04:0C:AE:96:36:22:E8:F0:F0:4B:53:26:D7:5D:CF:51:5B:9A:38:DA"}}},"request":{"raw":"GET /assets/home2.dde3f902.png HTTP/1.1\r\nHost: basetructcc.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://basetructcc.cc/assets/index.5e982a75.css\r\nCookie: bytetrack-sdk-deviceId=f58d2670994742e38e54734db00517e7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 02:02:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Aug 2026 02:56:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8e55d0-b73ef\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 166\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PI7BXmvdJcHi0YNXns6CLsQCt68XzuK1Cf%2Bu5eiRAGgsbRS3fl2zdxTolE46xcpdHMKPxpaUVD8FJVgLwDKXro8iPHCg2uhDoyYzcu%2FNqBLZMes7%2Bhz7RrKB%2BnkRIKrR6A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a348eeb8a8a156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":750575,"size_decoded":746178,"mime_type":"image/png","magic":"PNG image data, 3840 x 214, 8-bit/color RGBA, non-interlaced","md5":"4b1c83915a88dc42813f90e57449e819","sha1":"5368dbeb003044b69e74d6ebddf9ff671bf0fa48","sha256":"dde3f902bcd9a439c601d084d55dd7eb45e98508eb15e3e748c3826f76a8c3ff","sha512":"3b46fd4428eeda616f8e639c27b007a43872c4ba21266d629c905775eed2fa9a66fe6c7cf3cc549567dd589992db7373ec3f6fe8fd056c5aa76c60cf9bdf94f9","ssdeep":"12288:4wAQxdW1ozCd7xy6JfmLmpF8+N4T3JBD4iKU8cA4bhU5YKjRTxuoFrMKX/bwe7:4wAWdW1ozFqpHF/cA4bm5XvXdb17","tlshash":"a0f423bfa2d28af04c03f8714b592168ddb8b6e11b79e7203627634d62b8753ca40f95","first_seen":"2026-03-17T06:00:28.23405Z","last_seen":"2026-09-02T02:03:26.231097Z","times_seen":20,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}