{"report_id":"498b5430-3d04-42ff-ae33-9dea5e96f551","version":6,"status":"done","tags":[],"date":"2025-11-09T18:13:54Z","url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"title":"91i吃瓜","dom":{"size":32870,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16994)","md5":"b2ebee7d43ab82b24b6c336f4e4cf3c8","sha1":"3cd9523f51a22be72d2295a354d9e59957aec350","sha256":"0575c21456d92e09166190126c5c193371c9362fa37f816420fa47d4ce487085","sha512":"39c5e5d34b50fd3730b71ebf7e2ad00862c9f608c9f4735724b6cf5dcb24387acf2e4e2cd04b344e011db4a4a8e53d008ac527893c23d01f9d5da40aef84fe52","ssdeep":"768:tmQMueO/7m2wTFot2btaIrNXm7Rirsit9ijNjiyi2iMiEiD0iQc5qi4BiAa+QiX4:tkGtMtaIrNXmNFEWp3DdBVVlB/a+QmRs","tlshash":"71e2a5335072122b072775f471a16b5ca8e3e39fc94258407bac23e24fcfeb5e9a6581","dom_hash":"domhashfe238110efb913b3efe820f16ad18c25","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-14T18:13:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn2.dd.rzpsrl.cn","ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-06-17","domain_rank":0,"first_seen":"2025-11-09T18:13:54.733892Z","last_seen":"2025-11-09T18:13:54.733892Z","alert_count":0,"request_count":10,"received_data":788756,"sent_data":4526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"91icg.com","ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2024-04-22","domain_rank":1813411,"first_seen":"2025-11-09T18:13:54.718677Z","last_seen":"2025-11-09T18:13:54.718678Z","alert_count":0,"request_count":3,"received_data":247640,"sent_data":1488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"icon-2.dd.rzpsrl.cn","ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"domain_registered":"2024-06-17","domain_rank":0,"first_seen":"2025-11-09T18:13:54.717187Z","last_seen":"2025-11-09T18:13:54.717187Z","alert_count":0,"request_count":3,"received_data":46528,"sent_data":1318,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/vue.global.prod.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f251d07a4eb8655b7142a2246e692dc1","sha1":"b93428b91a7a32f01439e2ea8faad2c0beebb920","sha256":"ade9795e18be01f205e1a650783410fd48059e768668c95cf7f7e7d070f97b9e","sha512":"6870e9e810e59db44b0d3c66639188a9003445077a76678a2030c388426546b28d40f65ba369a3b11fc318c533ba9702a44e1780fc9e20f9c341d24d52678487","ssdeep":"3072:/B3R4FDuuU795+djmw1MtGbWmUAiHnLEA:Zh41uuU79ojhWGbWm1iHLd","tlshash":"dec33aa93681b43263ea18e610bf0405f37918257c0d94e4f22deddb3d7691942ebfad","size":125071,"data":"","first_seen":"2023-07-18T09:38:59Z","last_seen":"2026-05-24T15:41:38.769373Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/js/390189a9-796f-451b-bef6-e2b51e803818.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"63b1823b20e8753ed0f373b0fcd8b45b","sha1":"41b0768b18d5e691efb717e3ed9bc9897aca8a00","sha256":"5748a2e5cbfef355cb976e41ccb1e86f4c0aa4d8b5a9d6f2d47c651382ed5435","sha512":"9635cafc39f88347dbe5d70a6e6b5fa7c381a7a02cc9874ea431f0a4d898debc5a13df7c74d379efe809f5bbb5866450d5ad5e44de1f9a8c563a791565ff9b37","ssdeep":"192:PVHh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:PIA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"cc22955cb280b1b19ae760a9813f424fb331a469709a90d4b239e8f1bd78dcd5467f3c","size":10664,"data":"","first_seen":"2024-09-19T23:04:07.149296Z","last_seen":"2025-12-15T00:43:08.91244Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18b124b1778fb911647c0cdd907a6f80","sha1":"ca46322f74526fdc22d3c2a551663230ef07dee9","sha256":"3dc7848a7b95e2cd7761374a41258f2b6f3daafcdef7a7d186eee18f5b4f1101","sha512":"cf55d6f7448bd0940b2a11cd51449959575624d2497945324aa65e5d5c0452c166091c2730502056e0d4f880577a8b2db9c5cbd8b3fb7da368a931b47f92f5f9","ssdeep":"","tlshash":"c021082e30e024761a533d7a9ccf25849a28b127590d2c513d4e62218f6ae3d3eb1f84","size":1276,"data":"","first_seen":"2025-11-09T18:14:04.301077Z","last_seen":"2025-12-15T00:43:08.935093Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"5c5debc9830089a17d9ffa73ac9f656d","sha1":"9a0e3fb2abbcc6e4fbaae5fe62e41e97f1598b50","sha256":"3a2db135af5f2644b964198c06de8d20720223f50d4d2f77c3396b70eef033e1","sha512":"1679f5a6f83ead75d6436b4db4e9cea16dd05b55b1547f21fc098ca6e727a4583a1a298523bd3533c5fb49ca051f040063cda598da8372b40a36665eb1fc2039","ssdeep":"768:DRDmjhyCOYc5PcJ4c4meYWDkKhTdcwjchcc+9cbUNrRmUewhfeDUsemCE1bINTWE:DRDmjhyCOYc5PcJ4c4meYWDkKhTdcwjv","tlshash":"7de2ae22e579462b54db219b5ca2740fb340634b477434807bddc62debbce6a27f92c4","size":34228,"data":"","first_seen":"2025-11-09T18:14:04.30307Z","last_seen":"2025-11-09T18:14:04.30307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/vant/vant.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b205a647d205b544078ea093ffbd3c9","sha1":"4e9431abbb049f1c1445f8b25762d9469d8bf5db","sha256":"8f81b1930f0f28865767561b8e049729cdceff93bda60e0a2ab96ba000f4c519","sha512":"f2de8fdb7cf81e26839e6a15b9a32192f50b8859e1ab7ac097568c3115fc99c860f5d8aaca7f9799abd7eb0c59cd7486a67970cdeac9e237cf2f76df32d36e45","ssdeep":"6144:z3iSdURkLJk28hdGd9oMgjlQgizQgxTapJezc+0gsPAl:z3iSdUWd9oMf8kOezCgsPw","tlshash":"6a2429a0f685f02557f790e650ba0510e1290b08f009d1e0f67ded9e2bed994b6bef78","size":219430,"data":"","first_seen":"2024-06-20T10:48:52Z","last_seen":"2026-05-11T15:30:42.408446Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/axios.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"75ed484a2ac421a9b7f6818c2835d5f1","sha1":"9f1ae5f964cd19a5e75f5274b9176744106f9b37","sha256":"040f352cfd68b3a5df2c2a06196f1002b5c0048f94e153435af868ae617158e9","sha512":"87deb8e2fd37a47aab2074e192f5e10763c9f337f913d232567ad27d983c623f24e11b0ee3395d710738062f6254b5020aca8d6346f8597555e1407ec1b58434","ssdeep":"768:S7pj3+/lxDDY+KTgCFCVe3utbfwNz20HRbP9C5t7QWY6VBPdsDnlDljqO2SGLG+a:upjh4saOFPot9Y6VS3Jp","tlshash":"f833b5cc76d6f062439771b5802f600bf23aa915e44dc460f621e8e6bcb851ea377f69","size":54487,"data":"","first_seen":"2025-07-23T10:44:16.844258Z","last_seen":"2026-05-24T14:41:50.335128Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a178f009e762f2c8cfc8f42862346ec9","sha1":"5d84d258ec0be84b9ea50a74807f54afe199c48c","sha256":"0f853dd6a580f485a95cbef27a3f21e18e318c97f0766657d32895e01e7efe17","sha512":"e8f44300efc4f04a04545c37fd91694d508ac08c92101c776da17153565e724b0a7edbd6060c1067ced2890124d59a135461f1533c73aa14ba2a215614de05e3","ssdeep":"","tlshash":"13d012eb32d008b554ee2b2bb83cc3c4347151a26a077491782e091487a0e9779aaad6","size":200,"data":"","first_seen":"2024-10-18T22:10:29.633752Z","last_seen":"2025-12-15T00:43:08.935733Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6568a2ebd3143e667da74e0cb770769","sha1":"e29e3ac93ccd0e8d13dcfc718bcf2e8bbbb99d79","sha256":"0fe97d06f6ee15d8575f58749dddb14c136a1d426ce020d97f37a6d6b184ec30","sha512":"0df85d7d0262bbe9be48827c3820ae38b79bc42fc5fd89907da31ece8bc134910b1a7ca1849e3e4979d94e391b9dee051ddd4d7cffaac23b93e916239775db7c","ssdeep":"","tlshash":"06f059066b7b028d9643105e36f5625a6974202f9402a9a234ccfeaa1f30f5869caf98","size":562,"data":"","first_seen":"2025-11-09T18:14:04.305628Z","last_seen":"2025-11-09T18:14:04.305628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6135823a6c4ca3a29d67a617f9ca0f2","sha1":"40d1bc1e4f854cb2344c1364257255d4e2927e64","sha256":"aaf6e7d00fa6603f38613d93837fce16517988ef28d39c0e017b72ed6ff241fd","sha512":"d238fdd835e8db35f4af64d1f55d2955bc0516d736203fcf04a517dbc55dd33f60a08d704ea3bcf19ba4cf6cbb66b16fac4b9de44d698e80731d7d52209fde9d","ssdeep":"","tlshash":"23d0a71af029b2591b6a24ef54451485e0ab204bb7050809b42a488891102f802a3c3e","size":215,"data":"","first_seen":"2025-11-09T18:14:04.307074Z","last_seen":"2026-05-28T14:53:01.863428Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/axios.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/axios.min.js HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 54487\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"75ed484a2ac421a9b7f6818c2835d5f1\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:27 GMT\r\nx-request-id: f3bdba31e579a762fa3d249642c931f2\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54487,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54376)","md5":"75ed484a2ac421a9b7f6818c2835d5f1","sha1":"9f1ae5f964cd19a5e75f5274b9176744106f9b37","sha256":"040f352cfd68b3a5df2c2a06196f1002b5c0048f94e153435af868ae617158e9","sha512":"87deb8e2fd37a47aab2074e192f5e10763c9f337f913d232567ad27d983c623f24e11b0ee3395d710738062f6254b5020aca8d6346f8597555e1407ec1b58434","ssdeep":"768:S7pj3+/lxDDY+KTgCFCVe3utbfwNz20HRbP9C5t7QWY6VBPdsDnlDljqO2SGLG+a:upjh4saOFPot9Y6VS3Jp","tlshash":"f833b5cc76d6f062439771b5802f600bf23aa915e44dc460f621e8e6bcb851ea377f69","first_seen":"2025-07-23T10:44:16.844258Z","last_seen":"2026-05-24T14:41:50.335128Z","times_seen":358,"resource_available":true,"data":null}},"time_used":958,"timings":{"blocked":396,"dns":371,"connect":27,"send":0,"wait":119,"receive":11,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/css/aliicon.css","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/css/aliicon.css HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 9504\r\naccept-ranges: bytes\r\nage: 549946\r\netag: \"39dc14081ed33e7f095ec2aff9f68ac5\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:27 GMT\r\nx-request-id: 14ecb09568710f6aea792fcfcf8ec0a8\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"39dc14081ed33e7f095ec2aff9f68ac5","sha1":"c869074f1903ff145f5aaf63b3dc32d1f4ad78d2","sha256":"2d62cf610e83f84b3a70e052f8b38b449162914a2cfdc689be49ff69fd9de8fd","sha512":"1d51396cd3ae050c92083d779c0dcd03687bea66b8c23b8593fc857d7ba94c34284a7eb84144dd8f26f0d0e982b824315e469232acc891ee3ee17ed2693d9819","ssdeep":"96:sbrbbtbudjO/hXt/3Ri+CsUjqn9RsMASx8ABb0Qrq2Ew3U8iWc:JVO/hXt/3RoXgfsukh2Ev","tlshash":"1312ebe098bd2cb41718e5d02356b664ef1d72e89f8b4c5bf2a77d9c67e32005092adc","first_seen":"2023-05-28T17:29:49Z","last_seen":"2026-05-18T08:13:43.35342Z","times_seen":101,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":394,"dns":337,"connect":27,"send":0,"wait":115,"receive":19,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/public/worker/PicWorker.js?v=5","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:33.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91icg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 05:01:55 GMT","end":"Thu, 11 Dec 2025 05:01:54 GMT"},"fingerprint":{"sha1":"9B:AA:A2:10:E0:89:5B:8F:08:72:2F:12:FB:62:6D:31:54:51:1C:15","sha256":"77:27:B4:71:5D:65:DB:96:69:3F:BB:36:C9:7C:5D:5A:61:CA:01:3F:EC:AF:C5:02:6F:A3:08:ED:8D:94:02:5C"}}},"request":{"raw":"GET /public/worker/PicWorker.js?v=5 HTTP/1.1\r\nHost: 91icg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nCookie: server_name_session=2a8fac299e0e557962da19df0974575c\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 09 Nov 2025 18:13:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 09 Jul 2024 08:29:47 GMT\r\netag: W/\"eL1lDBvmSFhGvtTrk0GzXw==\"\r\ncache-control: public, max-age=31536000\r\ncontent-md5: eL1lDBvmSFhGvtTrk0GzXw==\r\nx-readtime: 0\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7242,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7242), with no line terminators","md5":"78bd650c1be6485846bed4eb9341b35f","sha1":"17c3853601a4b724abe25199cb123382f894ac85","sha256":"055df334e2a5dff68e2e282c20fb1d80d62f1344c058b9d89e95f90cbb9f367f","sha512":"4098a4c0c41a0a35783cac813882551adc8be303fde42a50ea4415c6a8d6a1e7c8892a70c4373351a044375eb18b5a8e956da0b8bc74dc7cafd4d42aa7a5676d","ssdeep":"192:DkWWzq8dZKV40KVm3z4yjj7NUxgLE8T/vxmfY2/Rm89:/XAQW0xKgLX/vqRx9","tlshash":"89e152f4fee429d34aac4b77a4551f4f26a50abe8607488345f926ce01babf7dd1d008","first_seen":"2025-08-15T15:02:44.312759Z","last_seen":"2025-12-15T00:43:08.918734Z","times_seen":4,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/public/worker/crypto-js/crypto-js.js","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/public/worker/PicWorker.js?v=5","date":"2025-11-09T18:13:33.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91icg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 05:01:55 GMT","end":"Thu, 11 Dec 2025 05:01:54 GMT"},"fingerprint":{"sha1":"9B:AA:A2:10:E0:89:5B:8F:08:72:2F:12:FB:62:6D:31:54:51:1C:15","sha256":"77:27:B4:71:5D:65:DB:96:69:3F:BB:36:C9:7C:5D:5A:61:CA:01:3F:EC:AF:C5:02:6F:A3:08:ED:8D:94:02:5C"}}},"request":{"raw":"GET /public/worker/crypto-js/crypto-js.js HTTP/1.1\r\nHost: 91icg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/public/worker/PicWorker.js?v=5\r\nCookie: server_name_session=2a8fac299e0e557962da19df0974575c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 09 Nov 2025 18:13:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 25 Jun 2022 09:43:24 GMT\r\netag: W/\"9xagKWnkWf38jzfe4jXpJQ==\"\r\ncache-control: public, max-age=31536000\r\ncontent-md5: 9xagKWnkWf38jzfe4jXpJQ==\r\nx-readtime: 1\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198114,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"f716a02969e459fdfc8f37dee235e925","sha1":"6f2bb245feaa0997fa30b085af0e8990d21395cc","sha256":"f0bdf25fda8f9af5920c82070775864c7e1166eb31540d030e6b80a382e39ce1","sha512":"3505662f3372e0baf9413ae65efabf5b34cc5274479afee7c884ff33a2f218f052f9321e47167e6106aa5b18e9469bd13104ae60f414459cfffa92e2f35c5778","ssdeep":"6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB","tlshash":"2e147344afd454c0f853a55e1fafb804f1b2701b0990dc0a794daab0ff59a344ae9bed","first_seen":"2023-03-07T01:18:52Z","last_seen":"2026-05-30T17:32:37.585044Z","times_seen":2808,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91icg.com/","fqdn":"91icg.com","domain":"91icg.com","tld":"com"},"ip":{"addr":"198.16.36.168","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T18:13:31.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91icg.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Sep 2025 05:01:55 GMT","end":"Thu, 11 Dec 2025 05:01:54 GMT"},"fingerprint":{"sha1":"9B:AA:A2:10:E0:89:5B:8F:08:72:2F:12:FB:62:6D:31:54:51:1C:15","sha256":"77:27:B4:71:5D:65:DB:96:69:3F:BB:36:C9:7C:5D:5A:61:CA:01:3F:EC:AF:C5:02:6F:A3:08:ED:8D:94:02:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 91icg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-readtime: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: server_name_session=2a8fac299e0e557962da19df0974575c; Max-Age=86400; httponly; path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40949,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"818fa9e1a4597fa127d3720642a39a8f","sha1":"1c1be70d6aed2a444eb97f282011f3cc99415045","sha256":"c8ab9e3f2db64820609d8ecd6576fa9d21c23bb45d9f20374aa1d53535231d48","sha512":"4e925ee9072b862e9eb645b3f01e4429fa1864f0febff382b35dcdc81f1197eb3dc630beda24c7b16b91498366c8b69285e75a422becbaf03e0963c4bc5f0747","ssdeep":"768:2BF3fvzOs2A1rvgkk7QwJK4IJiOruzsO9WoN5t+Lbj+FPv5HgmqeeTnJiEaRSdJI:8rIkk7QwJ9I5fj+KI","tlshash":"4103512221e2412b0733b1e199b16b9cedd29187c64656447bec23d34fffe63e993588","first_seen":"2025-11-09T18:14:04.274Z","last_seen":"2025-11-09T18:14:04.274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1415,"timings":{"blocked":627,"dns":46,"connect":156,"send":0,"wait":156,"receive":0,"ssl":428},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/vue.global.prod.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/vue.global.prod.min.js HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 125071\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"f251d07a4eb8655b7142a2246e692dc1\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: aa80b1b0dda4b10dd09b0f97dc153f0d\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f251d07a4eb8655b7142a2246e692dc1","sha1":"b93428b91a7a32f01439e2ea8faad2c0beebb920","sha256":"ade9795e18be01f205e1a650783410fd48059e768668c95cf7f7e7d070f97b9e","sha512":"6870e9e810e59db44b0d3c66639188a9003445077a76678a2030c388426546b28d40f65ba369a3b11fc318c533ba9702a44e1780fc9e20f9c341d24d52678487","ssdeep":"3072:/B3R4FDuuU795+djmw1MtGbWmUAiHnLEA:Zh41uuU79ojhWGbWm1iHLd","tlshash":"dec33aa93681b43263ea18e610bf0405f37918257c0d94e4f22deddb3d7691942ebfad","first_seen":"2023-07-18T09:38:59Z","last_seen":"2026-05-24T15:41:38.769373Z","times_seen":186,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":393,"dns":372,"connect":24,"send":0,"wait":28,"receive":33,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/vant/vant.min.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/vant/vant.min.js HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 219430\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"0b205a647d205b544078ea093ffbd3c9\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: 857b91b8e718374bf278710e0381bd58\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219430,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65252), with no line terminators","md5":"0b205a647d205b544078ea093ffbd3c9","sha1":"4e9431abbb049f1c1445f8b25762d9469d8bf5db","sha256":"8f81b1930f0f28865767561b8e049729cdceff93bda60e0a2ab96ba000f4c519","sha512":"f2de8fdb7cf81e26839e6a15b9a32192f50b8859e1ab7ac097568c3115fc99c860f5d8aaca7f9799abd7eb0c59cd7486a67970cdeac9e237cf2f76df32d36e45","ssdeep":"6144:z3iSdURkLJk28hdGd9oMgjlQgizQgxTapJezc+0gsPAl:z3iSdUWd9oMf8kOezCgsPw","tlshash":"6a2429a0f685f02557f790e650ba0510e1290b08f009d1e0f67ded9e2bed994b6bef78","first_seen":"2024-06-20T10:48:52Z","last_seen":"2026-05-11T15:30:42.408446Z","times_seen":9,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":394,"dns":372,"connect":27,"send":0,"wait":106,"receive":27,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/vant/index.css","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/vant/index.css HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 183398\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"448a6f403816cc725a5394805b6ea902\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: fc8a4361f78ce3a5f55de91245cf2109\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37950), with CRLF line terminators","md5":"448a6f403816cc725a5394805b6ea902","sha1":"860eb51c59ad369629364ff50351e2ed448123bc","sha256":"b3ce187301854e8a1d6b65e0220dec9a731b4c153106cc190fc65545fb5349ff","sha512":"6dff2a039a863e792e9ca2d35c5389bab0a8abe06aa586b1ab14bcd1f9d08837f92b88ba23f8c94f9cf918fe7029704d8c23d7b2c4e9f42545b3532ede7dfad3","ssdeep":"1536:Twe5J+jOkiHctnubsfTwLCgV8jFNlMVqB0DxrAVYaIzQrlVCRHxP:TcnumTwLCjHdrruP","tlshash":"590473a9ea90a17c7f17f1759b8b96dcf13cb960ed01daa4f10091584ec7ff1062362a","first_seen":"2023-07-18T09:39:00Z","last_seen":"2025-12-15T00:43:08.933731Z","times_seen":8,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":78,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icon-2.dd.rzpsrl.cn/no/logo.png","fqdn":"icon-2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /no/logo.png HTTP/1.1\r\nHost: icon-2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 12139\r\naccept-ranges: bytes\r\nage: 548246\r\netag: \"cb2f6c33c75a0a9bdecef0eea5331d13\"\r\nlast-modified: Mon, 28 Jul 2025 19:28:22 GMT\r\nx-amz-meta-mtime: 1738952798.053\r\nx-request-id: 5203c0306e23a968b73204f4f88eb40c\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 167, 8-bit/color RGBA, non-interlaced","md5":"cb2f6c33c75a0a9bdecef0eea5331d13","sha1":"5f02d66468bd3d45867c680f9d6f837671b80f2d","sha256":"ce6303322d987db317b7fbddd80ed19846ca363e799d9cba2e3cf173d2472a7f","sha512":"b92f988afc4d84935a79aeed5876d4a4c1cea6979d28e86b024bc0ee87c9eab50f5fccaace941547e78e48607198fb0b187ff3dd7f45259bdbf8e164de14ac8e","ssdeep":"192:JknMQYyAPQO86ot3j9JMgsvEKfPmlviYvkqSu2kq1eyvJcG1wbNPkdzg89/CNzh:ynMQYPPQOFgDLOzcviYcDlkxyvWG1wbB","tlshash":"2342be08efdcc86c118dfba3c4a8e62bdff653c0cad19a81b9978457a8d40f19c45b85","first_seen":"2023-07-18T09:38:59Z","last_seen":"2026-05-28T14:53:01.800001Z","times_seen":33,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":486,"dns":1,"connect":29,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/css/style.css?v=1017","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/css/style.css?v=1017 HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 148917\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"01f348c0b9e86fd2dfb8593e7385da6e\"\r\nlast-modified: Tue, 16 Sep 2025 18:03:16 GMT\r\nx-request-id: 6b1209ae47c3b32a8ff06742fd9335bd\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148917,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (970), with CRLF line terminators","md5":"01f348c0b9e86fd2dfb8593e7385da6e","sha1":"21265158cbd60085e55ac8f3c9b2253b4898feb3","sha256":"8a5327d5aaac6f62d6ed624fd95b9ff41f7cadd0fafdb7b4980018b81a1c5928","sha512":"36bfc3fd3fa8f8d398f4d90aeeed24a816745a92598a7a985fd65c1ac8e19bf989a0b58864e3cd077f8100de4d89a7dbe3dcac36faf9c01d1d2b0e0ffcc36dfc","ssdeep":"1536:uGBxPKkIhXCFss3einh8UlsD7aaBTjgK1L5nLT:uGv7ss3e+TlsbBTjgKB5nLT","tlshash":"c4e33266d6162147623bfbb8aff21719fb550023d70205a8bbcc67458ff596881a0fcd","first_seen":"2025-11-09T18:14:04.290499Z","last_seen":"2025-12-15T00:43:08.932133Z","times_seen":3,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":397,"dns":370,"connect":27,"send":0,"wait":116,"receive":19,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/js/390189a9-796f-451b-bef6-e2b51e803818.js","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/js/390189a9-796f-451b-bef6-e2b51e803818.js HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 10665\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"588d43d14a5ae20455d1739631e40853\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: a1368d3dc5c2e47c6c72e3264a497264\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10665,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552)","md5":"63b1823b20e8753ed0f373b0fcd8b45b","sha1":"41b0768b18d5e691efb717e3ed9bc9897aca8a00","sha256":"5748a2e5cbfef355cb976e41ccb1e86f4c0aa4d8b5a9d6f2d47c651382ed5435","sha512":"9635cafc39f88347dbe5d70a6e6b5fa7c381a7a02cc9874ea431f0a4d898debc5a13df7c74d379efe809f5bbb5866450d5ad5e44de1f9a8c563a791565ff9b37","ssdeep":"192:PVHh4LyP153pPJ7rVWLBTwuLJ/eXbA5gpEHa4Lyc2mltIjk1QGo:PIA3JVVWLBT9LJ/eXbA5Tj2mzg/","tlshash":"cc22955cb280b1b19ae760a9813f424fb331a469709a90d4b239e8f1bd78dcd5467f3c","first_seen":"2024-09-19T23:04:07.149296Z","last_seen":"2025-12-15T00:43:08.91244Z","times_seen":6,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/images/loading.jpg","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/images/loading.jpg HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 12990\r\naccept-ranges: bytes\r\nage: 549353\r\netag: \"f28cc84bb0939bd0dab1c84a7d2e3d41\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: c7fc9884331a80d42472f81e787e93d8\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12990,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=590, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=400], progressive, precision 8, 400x590, components 3","md5":"f28cc84bb0939bd0dab1c84a7d2e3d41","sha1":"f5ff73a4dc327b68caf053414cacf1514557a8ae","sha256":"c033883ef75dc19858b572ecff2f506678530d72dd05a927273b7591d736d483","sha512":"d86b76a076cd23147b8ffbf9be4b3748c4994535c0c6d0b3b0c2101b14fae0981b4f3d584e041620852b8ccfa4f89d9fd178ea422fae3911ebb1fb1ad85c2977","ssdeep":"96:2HCU7tBS2/Uy4lyLJOP25sP2gdU7tBiCknmWL/GJHNNG+Gp7N26MT0D5MdtbZPAx:7AI28y4lDuqu8AxknGttYNMtKwAUo","tlshash":"6b42b439bb44cda3f8e0913859a9db87f321be54e3637747788c21593b72a815d4e342","first_seen":"2023-07-18T09:38:59Z","last_seen":"2025-12-15T00:43:08.915539Z","times_seen":7,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/font/dianyingim.ttf","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:33.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/font/dianyingim.ttf HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://91icg.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn2.dd.rzpsrl.cn/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 9708\r\naccept-ranges: bytes\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, DELETE, MOVE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date, Etag, Content-Length, Accept-Ranges, Content-Range, Server, Location, X-Amz-Version-Id, X-Amz-Checksum-Crc32, X-Amz-Checksum-Crc32c, X-Amz-Checksum-Crc64nvme, X-Amz-Checksum-Sha1, X-Amz-Checksum-Sha256\r\naccess-control-max-age: 86400\r\nage: 549324\r\netag: \"31b9641cbee1a4e244cce6ded5832cf3\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:28 GMT\r\nx-request-id: c56bb1640651321155dbd05f49367d87\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:33 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9708,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, dianyingim ","md5":"31b9641cbee1a4e244cce6ded5832cf3","sha1":"78a796cb9f14d2a034048c703055775c2565d9e2","sha256":"94b8703e7cfca400d74baf753bc4a8aa03889dc1d7499d1b3070599bf079797e","sha512":"a1f39ab783bced3a4e5e253d70525b793080c3c9e09fce6e1ef0f1248a4c7548dd9191d922ca53188e37e761137eefcaaba628727cedd2b9749e9ea64294ceea","ssdeep":"192:48LizZBz4dXUgUrBkPA1b1b1JCrCYy8H02j57mgSAPqekGQJ0j4YAZd3S6mNLl3K:48qd4wI5vH02F7mgSAyH2UYA+5A","tlshash":"9f125a4de3edce6fe85397f5a021b5210bf5de01733eba0ea6459e19f4094e48c2ca15","first_seen":"2023-05-17T07:59:15Z","last_seen":"2026-05-30T12:31:29.430676Z","times_seen":200,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icon-2.dd.rzpsrl.cn/no/icon-192x192.png","fqdn":"icon-2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:33.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /no/icon-192x192.png HTTP/1.1\r\nHost: icon-2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16506\r\naccept-ranges: bytes\r\nage: 546874\r\netag: \"0cbe2d8fc7d11e4d2fab870869136784\"\r\nlast-modified: Mon, 28 Jul 2025 19:28:22 GMT\r\nx-amz-meta-mtime: 1738952797.664\r\nx-request-id: 11dd69ea50648345c5fd7d9566a7d82a\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:33 GMT\r\nvia: cache08.oversea-GM-FRA6\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"0cbe2d8fc7d11e4d2fab870869136784","sha1":"1e04ddf2310f5af9c22156492552e876c5f7985e","sha256":"21a0800d336e2e819ff33b58454913b41e2e5006708603ffcd1e939e3d2a14a4","sha512":"5d33116884a8c5843a3eafad1c105c7668e77f1a676dc415f6249c4067a090f5e69d87cdd7fc4609fb5a11fad0b7845b5a163bd8900a96665b8c0dc986d7917a","ssdeep":"384:A0/vBfCP3cKP0ZLywTp9kaTn+DShghzm38Qms:NvBKPsKP0HTp9Tvhg55W","tlshash":"ec72d0510177eaf7826c3a326ed73c826221e1f8900ad8ba7a56a1e461eb15013d135f","first_seen":"2023-07-18T09:39:00Z","last_seen":"2026-05-28T14:53:01.832361Z","times_seen":33,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn2.dd.rzpsrl.cn/public/statics/css/3969522b-acc0-4004-a2db-b389de8cb68c.css","fqdn":"cdn2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:32.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /public/statics/css/3969522b-acc0-4004-a2db-b389de8cb68c.css HTTP/1.1\r\nHost: cdn2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 9894\r\naccept-ranges: bytes\r\nage: 549333\r\netag: \"1ef994226390cfdeb36c257ba434a3bf\"\r\nlast-modified: Wed, 10 Sep 2025 09:41:27 GMT\r\nx-request-id: 16bd42ff684db3a98da4a96ad599029b\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:32 GMT\r\nvia: cache08.oversea-GM-FRA6\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1ef994226390cfdeb36c257ba434a3bf","sha1":"e276b7a487cee52e4cd80b887d85ebd19c60f654","sha256":"db96337f0a059bd1601cd1362637daf747ffd4c17b32b87458bc49f6585cc38c","sha512":"94e9ab7b2d1922acfacf89a9ff23b7ca883a09afee987c847801f7666b59c3c9ea037536a4363e069193ce7c92ba9f1e1e767b0d9f31608a1db6fecf3e0a5860","ssdeep":"96:U/WPxDbyKNLXl4F9W6qf+qcVO5nraSWRE+HWREeC27oYwuHwPL/t41qOxPxIFds4:COxDXseSVenTIB/hyyjVR","tlshash":"ca129da9f08f408f3307aa9d6a719935af1c50bcde0d0b6c74ed24a8f7e24d5a5b1489","first_seen":"2024-06-20T10:48:52Z","last_seen":"2025-12-15T00:43:08.923279Z","times_seen":8,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":395,"dns":334,"connect":27,"send":0,"wait":113,"receive":19,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icon-2.dd.rzpsrl.cn/no/icon-192x192.png","fqdn":"icon-2.dd.rzpsrl.cn","domain":"rzpsrl.cn","tld":"cn"},"ip":{"addr":"163.53.19.13","port":443,"asn":140630,"as":"JSLINK INTERNATIONAL CORPORATION","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://91icg.com/","date":"2025-11-09T18:13:33.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dd.rzpsrl.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 02:53:58 GMT","end":"Thu, 29 Jan 2026 02:53:57 GMT"},"fingerprint":{"sha1":"36:AF:9D:FC:F1:6C:E0:0A:FD:89:D2:3E:86:62:E3:C3:9F:7D:0A:A5","sha256":"9C:A9:92:13:D3:B7:DB:04:0C:EE:EB:05:C2:1B:36:1A:67:7C:9C:0C:66:D9:D9:C1:5E:80:4B:5E:05:3B:50:98"}}},"request":{"raw":"GET /no/icon-192x192.png HTTP/1.1\r\nHost: icon-2.dd.rzpsrl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://91icg.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16506\r\naccept-ranges: bytes\r\nage: 546874\r\netag: \"0cbe2d8fc7d11e4d2fab870869136784\"\r\nlast-modified: Mon, 28 Jul 2025 19:28:22 GMT\r\nx-amz-meta-mtime: 1738952797.664\r\nx-request-id: ce07d8757c275c25e7798fff67378081\r\nx-response-cache: edge_hit\r\nx-tt-trace-tag: id=5\r\ndate: Sun, 09 Nov 2025 18:13:33 GMT\r\nvia: cache08.oversea-GM-FRA6\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"0cbe2d8fc7d11e4d2fab870869136784","sha1":"1e04ddf2310f5af9c22156492552e876c5f7985e","sha256":"21a0800d336e2e819ff33b58454913b41e2e5006708603ffcd1e939e3d2a14a4","sha512":"5d33116884a8c5843a3eafad1c105c7668e77f1a676dc415f6249c4067a090f5e69d87cdd7fc4609fb5a11fad0b7845b5a163bd8900a96665b8c0dc986d7917a","ssdeep":"384:A0/vBfCP3cKP0ZLywTp9kaTn+DShghzm38Qms:NvBKPsKP0HTp9Tvhg55W","tlshash":"ec72d0510177eaf7826c3a326ed73c826221e1f8900ad8ba7a56a1e461eb15013d135f","first_seen":"2023-07-18T09:39:00Z","last_seen":"2026-05-28T14:53:01.832361Z","times_seen":33,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}