{"report_id":"50f85410-6cb6-4b59-bae1-ac9953443d55","version":0,"status":"done","tags":[],"date":"2026-07-23T14:20:24Z","url":{"schema":"http","addr":"trx.xinhuozig.vip","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"trx.xinhuozig.vip/#/","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"title":"trx.xinhuozig.vip/#/","dom":{"size":104038,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10974)","md5":"6b25b6cbb912002cd317c09ff0175a13","sha1":"fed585d677e3644341c809f990886fbbf219265a","sha256":"c6d41f862bf33eea1320a9d18a4b8730af298f06e9a9544314d27760afd59e73","sha512":"d9761bfe753b2c764a8ae49ffedb1105de0c67ba21bebaa7dc92ff2e275f9e2ea75406d7d56eed51820d08e1d159b4b9ba9ab59037ea2f58143c26c1ab197c4f","ssdeep":"1536:3kRJxFz1d8S2dZXEnNrHx7/f1JuZ202ZUEZ5snUdsnvosn71sn1+W6YEJJS+:6D4QK","tlshash":"bca3b471f649386ab93bc0b2a495fe597315a337c1024ab8fbad7629cfc9cd41923314","dom_hash":"domhash81f54372e970b00cac3df91bb49cf673","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trx.xinhuozig.vip","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T14:20:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trx.xinhuozig.vip","ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-07-23T14:20:26.408093Z","last_seen":"2026-07-23T14:20:26.408093Z","alert_count":0,"request_count":18,"received_data":1428637,"sent_data":9311,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"h5.xinhuozig.vip","ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-07-23T14:20:26.422526Z","last_seen":"2026-07-23T14:20:26.422526Z","alert_count":0,"request_count":2,"received_data":244981,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.xinhuozig.vip","ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-07-23T14:20:26.411371Z","last_seen":"2026-07-23T14:20:26.411371Z","alert_count":0,"request_count":4,"received_data":2168,"sent_data":2287,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tongji.dcloud.io","ip":{"addr":"115.159.78.199","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-06-05","domain_rank":2039554,"first_seen":"2019-11-22T07:30:27Z","last_seen":"2026-07-21T11:28:39.123415Z","alert_count":0,"request_count":2,"received_data":414,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-07-17T17:37:56.175091Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s2.flink2.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2025-06-04T04:07:02.979761Z","last_seen":"2026-06-17T16:05:34.11873Z","alert_count":10,"request_count":10,"received_data":63252,"sent_data":5782,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dncapi.flink1.com","ip":{"addr":"104.26.12.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":5597743,"first_seen":"2024-12-17T07:53:19.617908Z","last_seen":"2025-12-12T09:04:53.474648Z","alert_count":0,"request_count":1,"received_data":11165,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/pages-home-home.8d84bc54.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"69f9286c373a9e1d34a1bd60d0df41be","sha1":"1644369532bcad9feca806d3a02c205c58334cbe","sha256":"5cb669c456bbce37bb63d8b22b557b9d1ebde682d3d3269c0cd9a2578e2e0557","sha512":"826d7cbd38d25ba9a11dc190d215cfc6a40102f9e7e44769e0b8091369693f79227e06c661be662745e8aff0ce26b857351ea6abf910797a55544ba079e3e1f0","ssdeep":"384:Yle3lfEbrphbqBbLTjQGjObNyGz2w1ImuxgjkIfwQz6rPe1YkqJv6C+60M0Ot:YwG3b2bLTEGwT2wqxxCgI6Yi","tlshash":"a2e2b350b04ab07f0c6b8460a31f2925d23f2f76a055d8b5ebb1ebc54ed9989e117f28","size":31623,"data":"","first_seen":"2026-07-23T14:20:32.959535Z","last_seen":"2026-07-23T14:20:32.959535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-07-23T17:31:37.488926Z","times_seen":4582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0243b32451bacc7110c5a86a8c9c881e","sha1":"9a98bb921be35c174807222a554596b2f113b535","sha256":"c280c60feff3adac5fdc59d7c99140d4bd2cd7647be4b42383e7cbc3a2353d00","sha512":"f24d8dad08d5d73b81d31218b5351fd86ae3c0a237d884aee71bb624c06fac305df15a6f01d7f4e78979c51591c0dc756a1332d01d3d50d821cbc463532d0594","ssdeep":"6144:eGwVENCHIDCzg8kprgEq5DVXsH1o4UIe7qtJ2b/F9sqBv38FE:fwaV+z9d7c+4peWg/Z38W","tlshash":"b5f4f79cb285b0a607e761f5003f220bb27b6968b40a94d5f375e4d0ad79d8e6137f38","size":767929,"data":"","first_seen":"2026-07-23T14:20:32.978895Z","last_seen":"2026-07-23T14:20:32.978895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/index.40063f51.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"54ace96947efaa95095a366772cf752a","sha1":"698eaabdbe6c406fbd53525f4ad1a61de4abf74e","sha256":"6784caec9389fd114f0b53619cd9a420b147c23aecb17f317e1e5a2433c8b2b3","sha512":"0920ff0314d77d01f6d0a7e616b899467c24633c6a56631f1d303fa397ea9f0481bc77174519e9b28ea46c55f8428061ce01944b9fd6e92895469ccc413c1dc2","ssdeep":"6144:o4GFxx+RgJAAih8QtV11RLKvzZ3e5oG/yBvtD:+GABk1zKNp","tlshash":"fa647d98f6cae8de15a7d459d01fa20972223c26950a7451f7fce9e08e587cf9223f34","size":333091,"data":"","first_seen":"2026-07-23T14:20:32.972271Z","last_seen":"2026-07-23T14:20:32.972271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/pages-home-home~pages-home-widthdraw~pages-my-collect.8dc53cb6.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f5318a11c4f138fb30fde84ebab9174","sha1":"8a1233f9d9056cb4a6439fc4c69f1532a48834c0","sha256":"a665ccfd7930b7871500ad8233bdca871a35678e723c21b8e708a62e9f4f8354","sha512":"e0935d44130f2c08c2acc0df25e1bf569e622291136796262f4e5d4fdea4f7c6f5f5698d96189aebad5e775fb6ac82e6499081d538c1b22e36dd574348971017","ssdeep":"192:JlU/L3RsYclApSKQpq5m1EIYfLXsE5r+Ijdux1Z6IL:JlU/TqlsgHYD95Fj61Z6IL","tlshash":"d132c80cf4c2b44100538661c2ef9a19523efa976461adcd73a0f5db4f6578e1393b6a","size":11814,"data":"","first_seen":"2026-07-23T14:20:32.963737Z","last_seen":"2026-07-23T14:20:32.963737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[system]App Show","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"log","text":"[system]00000000000000","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"log","text":"[system]light","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"log","text":"[system]map[actor:server1.conn0.watcher16.process8//obj87 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[data:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj88 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] writable:true] errMsg:map[configurable:true enumerable:true value:request:ok writable:true] header:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj89 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:200 writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"log","text":"[system]map[actor:server1.conn0.watcher16.process8//obj154 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[items:[map[actor:server1.conn0.watcher16.process8//obj155 class:Object extensible:true frozen:false isError:false ownPropertyLength:14 sealed:false type:object] map[actor:server1.conn0.watcher16.process8//obj156 class:Object extensible:true frozen:false isError:false ownPropertyLength:14 sealed:false type:object]] kind:ArrayLike length:2] sealed:false type:object]","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172},{"level":"warn","text":"[system]Do not nest other components in the text component, as there may be display differences on different platforms.","filename":"https://trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","line_number":30,"column_number":1172}]},"http":[{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/tron.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.140Z","timestamp":1784816393140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/tron.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 7233\r\ncf-ray: a1fb5299ae6cdfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfQUutlkwJIsL5SwktmmvTPCXJJYcQ0X0Yb4CjpHVtDQ:5e583b281bce64da4a63e01dd20ebed2\"\r\nlast-modified: Wed, 02 Oct 2024 14:42:10 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=35+0 c=0+9 v=2026.7.0 l=7233 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=3;i=?0 1050;u=5;i=?0)\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xXtHl%2B2i7WZr%2FIY9rFdjfxVE5Jd6LRAKiVse63N3LCtM7kOMS5ApPMnL%2FAje3Tms8qmcodRfDpxuR3SqKzZeXzmUtz8Wt%2F5IfKX%2FhF8rZuWYD4zPzftIRc%2FEdj0vhM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7233,"size_decoded":8358,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"b969f5945a726c01fae0ea3a505d2546","sha1":"07585c4bd275f1446fb9ebaef2efb7f0eba78beb","sha256":"54f0f59c7a476d0c8a6f436fe4e8fa7871305f2a4131434322b7b23ab871fe79","sha512":"9a4e161d594c5c90c5a80cac46f303ca63732264c04e6c2c6c2a76e5bb09f35583f30a18ee3b721d4b9337e7519f5f9b507ab0e5134a0b7e56b2c3693e35e39a","ssdeep":"96:VD67QR0QOKAe6UPe/B/wfBqou0Q+dMsbRVsyzBQomj2N6pfM/krt/QGtVTgrlSm:NpRAe6Ye/B/HSRLSomyd/qt/QGni9","tlshash":"4de1af59c8fa2d2d80271af77cfcc1dc08cced608a9768329122652dde5b407ad0d52f","first_seen":"2026-06-01T22:47:29.94274Z","last_seen":"2026-07-23T14:20:32.955015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dncapi.flink1.com/api/coin/web-coinrank?page=1\u0026pagesize=10\u0026type=-1\u0026webp=1","fqdn":"dncapi.flink1.com","domain":"flink1.com","tld":"com"},"ip":{"addr":"104.26.12.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.146Z","timestamp":1784816392146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flink1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 17:33:30 GMT","end":"Wed, 14 Oct 2026 18:33:24 GMT"},"fingerprint":{"sha1":"71:95:A8:BC:03:63:63:72:A7:FF:E3:59:8E:C1:6F:B6:30:86:66:6F","sha256":"BC:FB:A6:9C:A8:D1:D2:B7:DC:7B:C8:79:22:89:DC:6A:CE:11:98:32:9E:09:61:A4:71:27:C4:25:1A:8C:FE:54"}}},"request":{"raw":"GET /api/coin/web-coinrank?page=1\u0026pagesize=10\u0026type=-1\u0026webp=1 HTTP/1.1\r\nHost: dncapi.flink1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: dnt,user-agent,x-requested-with,if-modified-since,cache-control,content-type,range,lan,authorization,client_idtrol,dnt,\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNikYPp7Tao2ZK3a5X1W0CyQRLIE94zD3cjfErXq0AQBqX1%2BlLLCkwQjOFUW4wno%2B7tFnDnlK37nHg9ewb%2BHATh1z9INe2qpF4X2Ow690jD1G2NSvWeHp0qgAOZaWjzgJos7\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a1fb52931a5e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10122,"size_decoded":7429,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4369b3c3c091c173b8b67f3e6179a5b5","sha1":"cb3cc0e0dfcd2bbd12ac16d2f2270a92cd64b013","sha256":"83c3925d56275c941bf3eb82e4eb8ca85808ca5fca138aa29ba954045c8c08be","sha512":"ca272f51f3b3ca836d09d3df3bb332785e91ad7a19e84a3eb1bb2955847912631b8d2cbbcc62a1ba895763f41c865c6d740e6f5ad2ab7b88aa39c62b032615ce","ssdeep":"192:opjAe1ulIYmMAj7J2L2QR07APCW4MBlcIkDriySeMR+BV87SUlOPifA8gWRQjXXB:opjn1UIYmZj7Ja2QR07fW4MBldkDriBO","tlshash":"f42246ef42b888980da5609f181767dd98ab32beddcc8ac0d5aecd85c025d7be117f41","first_seen":"2026-07-23T14:20:32.956139Z","last_seen":"2026-07-23T14:20:32.956139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":12,"connect":12,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/15496166191222b9b219aa6a2a20c79a.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.180Z","timestamp":1784816392180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/15496166191222b9b219aa6a2a20c79a.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/png\r\ncontent-length: 2203\r\naccept-ranges: bytes\r\netag: \"6a335476-89b\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:14 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2203,"size_decoded":2430,"mime_type":"image/png","magic":"PNG image data, 68 x 66, 8-bit/color RGBA, non-interlaced","md5":"15496166191222b9b219aa6a2a20c79a","sha1":"948962a866f963d3454e4ecd8f3daac78522b5ed","sha256":"bb6e2653c3c21e0b567289fa3cde7e579e0062c4cd73f9b384c77298a863a47e","sha512":"67d89f94a699a89d31afd7b207b0ab25f78aac36afaa81e771f86ae7193f818281aa1006ae0387a89032c1fbd5860b25cc3673b0fae5512bfaa2ef304f3aa2a2","ssdeep":"","tlshash":"53415c3141819c17f3bb14ee0d13f51b961e4a880ac0969a4b2c867dd104b7d782c667","first_seen":"2026-07-23T14:20:32.957221Z","last_seen":"2026-07-23T14:20:32.957221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5.xinhuozig.vip/upload/api/2026-06-14/photo_2026-06-14_15-53-21.jpg","fqdn":"h5.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:55.564Z","timestamp":1784816395564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:1D:AF:D1:C6:64:F8:7A:1C:24:2A:8A:3A:A5:44:9D:63:25:85:F2","sha256":"41:CD:01:C3:98:F4:13:02:6D:DD:7B:DD:5D:1B:1C:B6:1A:0F:19:07:86:17:8D:7F:79:ED:D1:39:30:88:B1:94"}}},"request":{"raw":"GET /upload/api/2026-06-14/photo_2026-06-14_15-53-21.jpg HTTP/1.1\r\nHost: h5.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=676202\r\ncontent-type: image/jpeg\r\ncontent-length: 124280\r\naccept-ranges: bytes\r\netag: \"6a2e5e24-1e578\"\r\nlast-modified: Sun, 14 Jun 2026 07:54:12 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\ndate: Thu, 23 Jul 2026 14:19:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":124280,"size_decoded":124569,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x546, components 3","md5":"f3bc842603de6c1b668444523f948a8c","sha1":"c96341c05b2a02b07c8529adabc6f0d37a4956ef","sha256":"4535f1ef08623517d24d4275f847f62d293ea5768092603d1b6ccae27e5b182a","sha512":"0011a6df35658780ee1ceda3de6d613aaa1a0b1ce4c7dcfc73030dfea49d0c1837a2e3e3a012778bb18ea0fa7acc10caa6ffcd29cc1ed5f26d9f2a893f29c117","ssdeep":"3072:FCymcucYikM70tHqQXjt4uAAAAAAAAAAAAAAAvW/IK38S6S5jbvzFKieoN2yU:UyFucFkM7SRtr/oShFKievyU","tlshash":"12c3120477d02ef7a0862c015bfa6d21390d4e255b68f6cc90b4a3e91cd5adb65a83fe","first_seen":"2026-07-23T14:20:32.958504Z","last_seen":"2026-07-23T14:20:32.958504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2421,"timings":{"blocked":0,"dns":216,"connect":269,"send":0,"wait":287,"receive":1100,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/pages-home-home.8d84bc54.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.857Z","timestamp":1784816391857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/js/pages-home-home.8d84bc54.js HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490330\r\ncontent-type: application/javascript\r\ncontent-length: 7862\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6a33546a-7b87\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:02 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31623,"size_decoded":8153,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30257), with no line terminators","md5":"69f9286c373a9e1d34a1bd60d0df41be","sha1":"1644369532bcad9feca806d3a02c205c58334cbe","sha256":"5cb669c456bbce37bb63d8b22b557b9d1ebde682d3d3269c0cd9a2578e2e0557","sha512":"826d7cbd38d25ba9a11dc190d215cfc6a40102f9e7e44769e0b8091369693f79227e06c661be662745e8aff0ce26b857351ea6abf910797a55544ba079e3e1f0","ssdeep":"384:Yle3lfEbrphbqBbLTjQGjObNyGz2w1ImuxgjkIfwQz6rPe1YkqJv6C+60M0Ot:YwG3b2bLTEGwT2wqxxCgI6Yi","tlshash":"a2e2b350b04ab07f0c6b8460a31f2925d23f2f76a055d8b5ebb1ebc54ed9989e117f28","first_seen":"2026-07-23T14:20:32.959535Z","last_seen":"2026-07-23T14:20:32.959535Z","times_seen":1,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xinhuozig.vip/uc/ancillary/system/advertise","fqdn":"api.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.171Z","timestamp":1784816392171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:CB:9C:ED:AA:E2:95:DB:05:CB:73:6A:68:EF:61:7C:E8:EA:82:36","sha256":"82:05:AA:70:41:45:27:59:96:95:75:7F:FD:28:33:1A:97:48:76:FD:A2:80:91:7B:C9:00:6C:DF:59:C0:6D:41"}}},"request":{"raw":"OPTIONS /uc/ancillary/system/advertise HTTP/1.1\r\nHost: api.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,x-auth-token\r\nReferer: https://trx.xinhuozig.vip/\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://trx.xinhuozig.vip\r\nvary: Origin\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, x-auth-token\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncontent-length: 0\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":545,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":2767,"timings":{"blocked":-1,"dns":88,"connect":267,"send":0,"wait":1056,"receive":0,"ssl":1354},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongji.dcloud.io/uni/stat.gif?requests=%5B%22uuid%3D17848163917978374490%26ak%3D__UNI__4F93605%26p%3Di%26ut%3Dh5%26mpn%3D%26usv%3D5.07%26v%3D%26ch%3D%26cn%3D%26pn%3D%26ct%3D%26t%3D1784816391%26tt%3D%26brand%3D%26md%3DPC%26sv%3DWindows%2010%20x64%26mpsdk%3D%26mpv%3D%26lang%3Den-US%26pr%3D1%26ww%3D1280%26wh%3D1024%26sw%3D1280%26sh%3D1024%26odid%3D17848163917978374490%26lt%3D1%26url%3Dpages%2Fhome%2Fhome%26sc%3D1001%26fvts%3D1784816391%26lvts%3D0%26tvc%3D1%26cst%3D1%26net%3Dunknown%26lat%3D0%26lng%3D0%26ttn%3D%26ttpj%3D%26ttc%3D%22%5D\u0026t=1784816391\u0026usv=5.07","fqdn":"tongji.dcloud.io","domain":"dcloud.io","tld":"io"},"ip":{"addr":"115.159.78.199","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.893Z","timestamp":1784816392893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongji.dcloud.io","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Mar 2026 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:9A:42:10:44:EF:01:06:7C:B7:76:E5:19:D4:9C:53:5C:F2:DC:5F","sha256":"37:03:EE:63:0E:9B:52:21:F1:AB:6B:0B:92:7C:9D:4A:17:8C:E5:3F:AE:68:0A:6D:44:64:F8:BC:5C:B3:AC:11"}}},"request":{"raw":"GET /uni/stat.gif?requests=%5B%22uuid%3D17848163917978374490%26ak%3D__UNI__4F93605%26p%3Di%26ut%3Dh5%26mpn%3D%26usv%3D5.07%26v%3D%26ch%3D%26cn%3D%26pn%3D%26ct%3D%26t%3D1784816391%26tt%3D%26brand%3D%26md%3DPC%26sv%3DWindows%2010%20x64%26mpsdk%3D%26mpv%3D%26lang%3Den-US%26pr%3D1%26ww%3D1280%26wh%3D1024%26sw%3D1280%26sh%3D1024%26odid%3D17848163917978374490%26lt%3D1%26url%3Dpages%2Fhome%2Fhome%26sc%3D1001%26fvts%3D1784816391%26lvts%3D0%26tvc%3D1%26cst%3D1%26net%3Dunknown%26lat%3D0%26lng%3D0%26ttn%3D%26ttpj%3D%26ttc%3D%22%5D\u0026t=1784816391\u0026usv=5.07 HTTP/1.1\r\nHost: tongji.dcloud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Jul 2026 14:19:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 35\r\nConnection: close\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":195,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df16d33739defe9bda1f4c45d36fd7a7","sha1":"ff7489a6dd9ab0d9a4b084315f5b9d77cf9fdf50","sha256":"90252ef0aa9e3d36c861bbeaa1bd57b7f855333edf2957ab9473838a52e2dd7f","sha512":"dbb699ffbdb377e503e352b44340b2504c096b2f74e6b37c695d59d89656ea1eb825f80f6790a8cce866102339eec9d2b6daaa7c8c180db726036f2808903bc7","ssdeep":"","tlshash":"33800003c2808002c2f2c2308a080302bb88a0200228038e80ae20a8fc3b2a00c82000","first_seen":"2023-04-09T07:50:54Z","last_seen":"2026-07-23T16:00:21.258275Z","times_seen":2430,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":0,"connect":193,"send":0,"wait":198,"receive":0,"ssl":448},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xinhuozig.vip/uc/check/login","fqdn":"api.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.849Z","timestamp":1784816391849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:CB:9C:ED:AA:E2:95:DB:05:CB:73:6A:68:EF:61:7C:E8:EA:82:36","sha256":"82:05:AA:70:41:45:27:59:96:95:75:7F:FD:28:33:1A:97:48:76:FD:A2:80:91:7B:C9:00:6C:DF:59:C0:6D:41"}}},"request":{"raw":"OPTIONS /uc/check/login HTTP/1.1\r\nHost: api.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-auth-token\r\nReferer: https://trx.xinhuozig.vip/\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://trx.xinhuozig.vip\r\nvary: Origin\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: x-auth-token\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncontent-length: 0\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":3089,"timings":{"blocked":0,"dns":410,"connect":267,"send":0,"wait":1870,"receive":0,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/e80584ca97bc569c10b1db6915f8275f.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.179Z","timestamp":1784816392179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/e80584ca97bc569c10b1db6915f8275f.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/png\r\ncontent-length: 1231\r\naccept-ranges: bytes\r\netag: \"6a335480-4cf\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:24 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1231,"size_decoded":1458,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"e80584ca97bc569c10b1db6915f8275f","sha1":"9954d149992c8d1f72ebc063066d99feeeb91b16","sha256":"9752cae04ac581e77c042dcd9501abdc1a578394cc358866362e683b1f50e314","sha512":"0d13a5f2280c5323a50b2d5fc1318cafeca7f683c41e894f329d32a062b709a11b9d4b9974bd879cb5461c9cae9d87ef07d1ed14055be6f7ec4e839b661cbcd9","ssdeep":"","tlshash":"dd21b7a503074d7e8fdd48df164a0d91e0ef2f963e61dbb3ae02e56e584840828c8317","first_seen":"2026-07-23T14:20:32.961418Z","last_seen":"2026-07-23T14:20:32.961418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/c71bf13eeea0b0f2dd72193947d8d892.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.908Z","timestamp":1784816391908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/c71bf13eeea0b0f2dd72193947d8d892.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676204\r\ncontent-type: image/png\r\ncontent-length: 9731\r\naccept-ranges: bytes\r\netag: \"6a33547f-2603\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:23 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9731,"size_decoded":9959,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"c71bf13eeea0b0f2dd72193947d8d892","sha1":"b7dbdb85fd05844cc133e6643d1de39c7062ab0e","sha256":"f9992dfa3269e456445f9eb3e78fce8db5f62d5f9531e4db9b769ba800a812db","sha512":"38101999b95d4bc1413031c61936a3adf358ed8974b25ec7abe4b11051ffec86736815d49b2693d8457f27c3a83c913e65081abc263cb2c6ccfae7cd20655df7","ssdeep":"192:A4/Qp6iDgi0701musQCmhHjCMgi274b7XRoW5AFUhidbNMcXE3g5E8Y/q1sci:A4/hiETg3imhu0btdKFUhDcXWyQ/iK","tlshash":"6212aec7966c135daaed68529079b9e1660efc10499c8d3914e9dcccbe21accd8278cd","first_seen":"2026-07-23T14:20:32.962253Z","last_seen":"2026-07-23T14:20:32.962253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/favicon.ico","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:54.534Z","timestamp":1784816394534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\netag: \"6a25855a-8a\"\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":307,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-07-23T16:51:10.229087Z","times_seen":315797,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/pages-home-home~pages-home-widthdraw~pages-my-collect.8dc53cb6.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.855Z","timestamp":1784816391855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/js/pages-home-home~pages-home-widthdraw~pages-my-collect.8dc53cb6.js HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490330\r\ncontent-type: application/javascript\r\ncontent-length: 3760\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6a33546a-2e8e\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:02 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11918,"size_decoded":4051,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11348), with no line terminators","md5":"5f5318a11c4f138fb30fde84ebab9174","sha1":"8a1233f9d9056cb4a6439fc4c69f1532a48834c0","sha256":"a665ccfd7930b7871500ad8233bdca871a35678e723c21b8e708a62e9f4f8354","sha512":"e0935d44130f2c08c2acc0df25e1bf569e622291136796262f4e5d4fdea4f7c6f5f5698d96189aebad5e775fb6ac82e6499081d538c1b22e36dd574348971017","ssdeep":"192:JlU/L3RsYclApSKQpq5m1EIYfLXsE5r+Ijdux1Z6IL:JlU/TqlsgHYD95Fj61Z6IL","tlshash":"d132c80cf4c2b44100538661c2ef9a19523efa976461adcd73a0f5db4f6578e1393b6a","first_seen":"2026-07-23T14:20:32.963737Z","last_seen":"2026-07-23T14:20:32.963737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xinhuozig.vip/uc/check/login","fqdn":"api.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.899Z","timestamp":1784816391899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:CB:9C:ED:AA:E2:95:DB:05:CB:73:6A:68:EF:61:7C:E8:EA:82:36","sha256":"82:05:AA:70:41:45:27:59:96:95:75:7F:FD:28:33:1A:97:48:76:FD:A2:80:91:7B:C9:00:6C:DF:59:C0:6D:41"}}},"request":{"raw":"OPTIONS /uc/check/login HTTP/1.1\r\nHost: api.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-auth-token\r\nReferer: https://trx.xinhuozig.vip/\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://trx.xinhuozig.vip\r\nvary: Origin\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: x-auth-token\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncontent-length: 0\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":3038,"timings":{"blocked":-1,"dns":359,"connect":278,"send":0,"wait":1845,"receive":0,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/9f4012ebc33f43dcdca3f14bff7e6042.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.911Z","timestamp":1784816391911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/9f4012ebc33f43dcdca3f14bff7e6042.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676204\r\ncontent-type: image/png\r\ncontent-length: 2977\r\naccept-ranges: bytes\r\netag: \"6a33547a-ba1\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:18 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2977,"size_decoded":3204,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9f4012ebc33f43dcdca3f14bff7e6042","sha1":"c441c37cff9f756aee22f6ae8f300aa6b4455bc5","sha256":"b7527569b3c84c0a1963378f926cfe42b419c29899351c57852eb11fa750206f","sha512":"ea7ccdc309c4d9ff2ba645f6be1509a72ee80a7e6c59df737a0689e4d3b88441df2f0a13627e84b5b64b3a9e3ae413728712d96a26622deef62894c529d68e79","ssdeep":"","tlshash":"99515c4ee9d83ef373b61e825a07213a7835c7d08618862446b3e07ea106a582fd7841","first_seen":"2026-07-23T14:20:32.964654Z","last_seen":"2026-07-23T14:20:32.964654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongji.dcloud.io/uni/stat?usv=5.07\u0026conf=%7B%22ak%22%3A%22__UNI__4F93605%22%7D","fqdn":"tongji.dcloud.io","domain":"dcloud.io","tld":"io"},"ip":{"addr":"115.159.78.199","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.888Z","timestamp":1784816391888,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongji.dcloud.io","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Mar 2026 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:9A:42:10:44:EF:01:06:7C:B7:76:E5:19:D4:9C:53:5C:F2:DC:5F","sha256":"37:03:EE:63:0E:9B:52:21:F1:AB:6B:0B:92:7C:9D:4A:17:8C:E5:3F:AE:68:0A:6D:44:64:F8:BC:5C:B3:AC:11"}}},"request":{"raw":"GET /uni/stat?usv=5.07\u0026conf=%7B%22ak%22%3A%22__UNI__4F93605%22%7D HTTP/1.1\r\nHost: tongji.dcloud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 23 Jul 2026 14:19:52 GMT\r\nContent-Type: application/json\r\nContent-Length: 20\r\nConnection: close\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20,"size_decoded":219,"mime_type":"application/json","magic":"JSON text data","md5":"3466c0ac1f19819cdfdbdca52da4504f","sha1":"36682dcc85efcda1dc70740fbf37a738ced3c278","sha256":"34de1a072dc6352de8b62eef4fe125a4914d41f31fd97c2245c823bcb25d9f57","sha512":"2ca6f204db98d3334899d595084b24ab2a2547cc09e18777f78b366dd9c31ee070a79306f20413b93ef92cc1aea5ba78d7a1386fc9aa3e6fd7f754e7883500a7","ssdeep":"","tlshash":"40700020080828202a00a802002bc002b2000c082c0228228000882c00020000300800","first_seen":"2023-05-21T19:32:14Z","last_seen":"2026-07-23T14:20:32.965552Z","times_seen":64,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":0,"dns":95,"connect":211,"send":0,"wait":217,"receive":0,"ssl":449},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/bitcoin.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.122Z","timestamp":1784816393122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/bitcoin.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 4224\r\ncf-ray: a1fb52aca88a56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfOZtv2x5VgEFY6Kmh3yE5tegmJYcQ0X0Yb4CjpHVtDQ:8452f85bf6782e6306cf6f8961d876f7\"\r\nlast-modified: Wed, 02 Oct 2024 06:38:17 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ram/h q=0 n=0+0 c=0+3 v=2026.6.0 l=4224 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 546;u=5;i=?0)\r\nwarning: cf-images 299 \"original is 409B smaller\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5I1SkM6ygbYcG8RQqqZ8p7IS1JUDpxs58lVyq7%2Fz53%2FEebuqx53mfPAxH3KrwYoE0CW6fDRcVJPFyCMOADRtd4oLWGDz37%2BMOngaj7brBruDFnZ0NqopQY0xSkQ5wo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4224,"size_decoded":5393,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"8452f85bf6782e6306cf6f8961d876f7","sha1":"dd21a7f9507dc2d3f12bde8f3a957227ef95c2ec","sha256":"c390cdef67061690934d0e53344240e279d87a0fbcdefde8b8212bd7698e31d5","sha512":"138ba52972192e3a39ff3236f317a37eac35200030358dc0e512320a0b6765b639d000bf1ab27c3535763d78ab5bdc2e44f7562bc1eaa4c0f04c3a25123e4ad3","ssdeep":"96:wB0G4Eh7lSvludM5xM09VTcQECKVjZxCsplFSLdtnLVcsi:xG3h4NJxWdVddQdxvi","tlshash":"4e916f5e8629f85e03ca1f0bc63edc50a53a0206474e2c4ad84c1f494d73e5f4fa8ce6","first_seen":"2023-05-10T20:40:30Z","last_seen":"2026-07-23T14:20:32.966062Z","times_seen":61,"resource_available":false,"data":null}},"time_used":3302,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":162,"receive":0,"ssl":3120},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/binance-coin.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.132Z","timestamp":1784816393132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/binance-coin.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1520\r\ncf-ray: a1fb52c2689a56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfntcTV644eBCXyqNx-fqnJLvIJYcQ0X0Yb4CjpHVtDQ:e78a379b68a54c667730191daf16c417\"\r\nlast-modified: Wed, 02 Oct 2024 06:33:27 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=16+0 c=0+3 v=2026.7.0 l=1520 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 200;u=5;i=?0)\r\nwarning: cf-images 299 \"original is 227B smaller\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHVL4dLMnzUO4vclyl2kosugwHoO54w9%2FwJRTaMCyxR2%2F1R2ayqfyOVmAIsPXAVoJXail3%2FWrh2SW0sQgd2133EI%2FT68OeNWmI5PPquW0YyCbSi9xyFtaytAwV0b%2BwA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1520,"size_decoded":2693,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"e78a379b68a54c667730191daf16c417","sha1":"24b3653441d9ba15aa0189b39a035dd165469cfe","sha256":"4dd9f36c8295a76b1c9f573b5764e01c2b2525b35c8d79faad72f8b46ac728e3","sha512":"0a1df6b541187a51f67850579bf0deb073b438912dfd75dc1d0fe9062a8b21697397d9ec1f5edb8afb0cd4e701846e9c8ee3f649aaddb4f6e5b6c42eb0a73a91","ssdeep":"","tlshash":"a1312c876f82f06461a08feb6e3b30844e70b27b6704d45945b0c6e43c929f1aef4261","first_seen":"2025-12-12T09:05:03.545267Z","last_seen":"2026-07-23T14:20:32.967334Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6775,"timings":{"blocked":-1,"dns":8,"connect":2,"send":0,"wait":165,"receive":0,"ssl":6596},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5.xinhuozig.vip/upload/api/2026-06-14/photo_2026-06-14_15-53-15.jpg","fqdn":"h5.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:55.563Z","timestamp":1784816395563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"h5.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D7:1D:AF:D1:C6:64:F8:7A:1C:24:2A:8A:3A:A5:44:9D:63:25:85:F2","sha256":"41:CD:01:C3:98:F4:13:02:6D:DD:7B:DD:5D:1B:1C:B6:1A:0F:19:07:86:17:8D:7F:79:ED:D1:39:30:88:B1:94"}}},"request":{"raw":"GET /upload/api/2026-06-14/photo_2026-06-14_15-53-15.jpg HTTP/1.1\r\nHost: h5.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=676201\r\ncontent-type: image/jpeg\r\ncontent-length: 120123\r\naccept-ranges: bytes\r\netag: \"6a2e5e02-1d53b\"\r\nlast-modified: Sun, 14 Jun 2026 07:53:38 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\ndate: Thu, 23 Jul 2026 14:19:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":120123,"size_decoded":120412,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x546, components 3","md5":"99921631bd984231518b2cd373775b39","sha1":"40334755822eb23fc3bae03ef9badbc950ec0dca","sha256":"444799a359661dee50c4284a06d67e504f2579c49c6666dd7890da72c774515e","sha512":"34e052598df4bc59b2ff1724c9fde1916eb2c7d9a441b33f00dfd18a5cef4ae5a260323a7555db828ed3763b8145afca7372871def62872d2aa38f5e47803bf3","ssdeep":"3072:yAlV47pu/n9lzMfz36VKj7bFYoS9GdkxWbt:ysWA/T47qc+GWx2t","tlshash":"36c312c453fd3d67c40db6923d589553bcd36a3a84e0fef7a4455d23b6aabdc08104a2","first_seen":"2026-07-23T14:20:32.968334Z","last_seen":"2026-07-23T14:20:32.968334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2393,"timings":{"blocked":-1,"dns":218,"connect":268,"send":0,"wait":269,"receive":1088,"ssl":550},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/d304d0df40d686e2d97378b1081e0b28.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.181Z","timestamp":1784816392181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/d304d0df40d686e2d97378b1081e0b28.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490330\r\ncontent-type: image/png\r\ncontent-length: 880\r\naccept-ranges: bytes\r\netag: \"6a33547f-370\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:23 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":880,"size_decoded":1107,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d304d0df40d686e2d97378b1081e0b28","sha1":"b7b767f74f3eb365ee2310ba7f66cafa79c6be58","sha256":"52b62a577d3e12ef2af246e05dcf4f44c35177314e267a744e6f4d641c693fc6","sha512":"2525e43adad2249cd843e99786e00885c82ba4f46b0825cdfbaf202b9ac50620193d2cdacb2637c5b1069a7649517e3f10035fca0fbb58cea291d02eb468e045","ssdeep":"","tlshash":"6511b3339f2828b8deb7dd62822a101ee0515c94b202234ed626c708e64e21a00b71d9","first_seen":"2026-07-23T14:20:32.969191Z","last_seen":"2026-07-23T14:20:32.969191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/c5773d4d7b5399587b745404d2a714fa.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.183Z","timestamp":1784816392183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/c5773d4d7b5399587b745404d2a714fa.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/png\r\ncontent-length: 42871\r\naccept-ranges: bytes\r\netag: \"6a33547f-a777\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:23 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":42871,"size_decoded":43100,"mime_type":"image/png","magic":"PNG image data, 296 x 176, 8-bit/color RGBA, non-interlaced","md5":"c5773d4d7b5399587b745404d2a714fa","sha1":"29f3534d1b389396487df25b907f6b99570e9693","sha256":"e489ea593e8aeac4a01c73aa514e4571e1bb84915473453184f66d80864476dc","sha512":"bd7d772ba04c58e5265badf9371d2cd57094d169aeca415a690d89e99ae783325af6528776c8e173d5dd7649402b78ee13cd526048859ea1b700631a04979eee","ssdeep":"768:NbUN6rVqVRiTZzPm/IAMGaa4eOonXfUopliLi47jFaj0cU8lk2MjH3iiu4M:NbUN5qFAMGaaZlN8jFajBk2M1M","tlshash":"be13018a8de38b9944c7cf514330495c9f9bc31a6b62f0fa2423344ed7352570c9aba6","first_seen":"2026-07-23T14:20:32.970112Z","last_seen":"2026-07-23T14:20:32.970112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.xinhuozig.vip/uc/announcement/page","fqdn":"api.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.8","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.147Z","timestamp":1784816392147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.xinhuozig.vip","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sun, 07 Jun 2026 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"81:CB:9C:ED:AA:E2:95:DB:05:CB:73:6A:68:EF:61:7C:E8:EA:82:36","sha256":"82:05:AA:70:41:45:27:59:96:95:75:7F:FD:28:33:1A:97:48:76:FD:A2:80:91:7B:C9:00:6C:DF:59:C0:6D:41"}}},"request":{"raw":"OPTIONS /uc/announcement/page HTTP/1.1\r\nHost: api.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,x-auth-token\r\nReferer: https://trx.xinhuozig.vip/\r\nOrigin: https://trx.xinhuozig.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://trx.xinhuozig.vip\r\nvary: Origin\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, x-auth-token\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncontent-length: 0\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":545,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":2790,"timings":{"blocked":0,"dns":112,"connect":269,"send":0,"wait":1869,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/ethereum.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.125Z","timestamp":1784816393125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/ethereum.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 2679\r\ncf-ray: a1fb529a9e2f56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfjlYA4vSmlPQgH2SP39w81o4EJYcQ0X0Yb4CjpHVtDQ:62ade6f22972078ee3b339e3ed03836b\"\r\nlast-modified: Wed, 02 Oct 2024 08:47:44 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=23+0 c=0+3 v=2026.7.0 l=2679 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 648;u=5;i=?0)\r\nwarning: cf-images 299 \"original is 69B smaller\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnVsR5cXTejPrFMR5VO5WC5xRxq1KKYirqDxv%2F7%2FPwZfzGz6Ot08TIzSRjoqr3ov%2F%2FjWEu%2FF%2F17MB3sNzubCvkk%2BCb8KSV1pmWpTFPhfO9wR8yUGZ3iTNp3CeRMnthE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2679,"size_decoded":3855,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"62ade6f22972078ee3b339e3ed03836b","sha1":"124b59ea80dcc1a6c7f30f25e6c10d7d0e2739be","sha256":"c7fd882aba3a920d13ae71867dbb929692b284afc813628ddeccf59b37cffcd7","sha512":"f66b7b2962b1bddfa486331213d8089aeee7c9245760464835558397942dea1076a7bcdeb28f61a5853c5e8998eac9db333a75d83721dafbf34ffcc940bda656","ssdeep":"","tlshash":"e9513eabb7cd97b3a3ba7128d91dddddb5dc912cc010019add2d6c9f107475f1640490","first_seen":"2023-05-10T20:40:30Z","last_seen":"2026-07-23T14:20:32.970914Z","times_seen":74,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":16,"connect":3,"send":0,"wait":166,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T14:19:47.910Z","timestamp":1784816387910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:49 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 18 Jun 2026 02:13:37 GMT\r\nalt-svc: h3=\":443\"; ma=604800\r\netag: \"6a335451-30f\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":783,"size_decoded":780,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (503)","md5":"e888e5793ea877d45d4cfcd9dcee83ba","sha1":"0ff10a459bd40af5c39e017ea6f2bfbebd7b6d09","sha256":"e6cd1bdd75bdee1ac6e80e428da63633da1c92c2cdd59ed2b5346455824b51f1","sha512":"fbdd342c90913dcaa82be6e4781cf95037b3e2c4be97e61f5b92567156e5ae62c13ae21e6ec0bf70e9720a5d1cbd7a0edeb9d4c959ca4b7af6355bb9ca39d72b","ssdeep":"","tlshash":"8501f1c31c11e44d0b10855174bbd11e8a6a49f56e51d9507cdc2aec8fe078ece2e811","first_seen":"2026-07-23T14:20:32.971416Z","last_seen":"2026-07-23T14:20:32.971416Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1739,"timings":{"blocked":0,"dns":381,"connect":271,"send":0,"wait":541,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/index.40063f51.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:49.936Z","timestamp":1784816389936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/js/index.40063f51.js HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490331\r\ncontent-type: application/javascript\r\ncontent-length: 111375\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6a335469-51523\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:01 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":333091,"size_decoded":111669,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47984), with no line terminators","md5":"54ace96947efaa95095a366772cf752a","sha1":"698eaabdbe6c406fbd53525f4ad1a61de4abf74e","sha256":"6784caec9389fd114f0b53619cd9a420b147c23aecb17f317e1e5a2433c8b2b3","sha512":"0920ff0314d77d01f6d0a7e616b899467c24633c6a56631f1d303fa397ea9f0481bc77174519e9b28ea46c55f8428061ce01944b9fd6e92895469ccc413c1dc2","ssdeep":"6144:o4GFxx+RgJAAih8QtV11RLKvzZ3e5oG/yBvtD:+GABk1zKNp","tlshash":"fa647d98f6cae8de15a7d459d01fa20972223c26950a7451f7fce9e08e587cf9223f34","first_seen":"2026-07-23T14:20:32.972271Z","last_seen":"2026-07-23T14:20:32.972271Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":950,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/tether.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.128Z","timestamp":1784816393128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/tether.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 4919\r\ncf-ray: a1fb529a9e2656b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfYVzH3cOHbmhdEYHywLJDSpgDJYcQ0X0Yb4CjpHVtDQ:c1e3f16d8512f3bf7f70ff9b9af9f67a\"\r\nlast-modified: Wed, 02 Oct 2024 14:22:40 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=16+0 c=0+3 v=2026.7.0 l=4919 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 729;u=5;i=?0)\r\nwarning: cf-images 299 \"original is 190B smaller\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FglWvYEhxb%2B0Yv0fDSrVVW3AC0v4pvRfxRPD3KzBUjyCQ8nnEZNfGyCH0qnbUDJ7twdhyPS012tWeQqvtfwFW8Fbr8W0c6apnZDrbDjmK5vikhGfMixFQcFdhZbKwo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4919,"size_decoded":6086,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"c1e3f16d8512f3bf7f70ff9b9af9f67a","sha1":"9c1a5f587f3e14e021e9e966bec989b51d245b97","sha256":"f40eee3381ab5b7c5e26950abf1b033ef7918b0ed0d4b0d92c305dee30198989","sha512":"43a1740c273c389e4a8ecd8b2d003f119639310ce386bab6bb72e620c4b9c51bbd1ca93fda1fc88a16d7e90bcd4e84b3a1e672f0224d6da24e389f64b6e2588b","ssdeep":"96:GZPRCAwPNwoEPDP6+Nbrd/1X3WYO3n2bIouWaZqL58MEQ:GZDaNwoG6+Jp9XmYinnZqL58Mb","tlshash":"cea15b3a186a2cfb611334c87b903b760c0225176557849f4ddd01fe695e23af57ad39","first_seen":"2023-12-03T03:44:19Z","last_seen":"2026-07-23T14:20:32.973277Z","times_seen":10,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":12,"connect":2,"send":0,"wait":199,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/ripple.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.136Z","timestamp":1784816393136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/ripple.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 6414\r\ncf-ray: a1fb529a9e2b56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfW9olw2A5Wv2Vw_XoXjOGPTcGJYcQ0X0Yb4CjpHVtDQ:c541259f800abb813643ba52c0893101\"\r\nlast-modified: Wed, 02 Oct 2024 13:07:43 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=268+0 c=0+4 v=2026.7.0 l=6414 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 936;u=5;i=?0)\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFH7GajVqWg0RG0cfQQKyOLqDSlbz9BY%2BJHRYkiZD4h2CTGZHlNiXbOOFJNOgj4TdjKvnm2ZP21mbY4a6ujAAVaVIlv352b2%2BuLpdncPjAAMIKhqcvyMOU24yI3sCdE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6414,"size_decoded":7531,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"8e798f291573a58e7483eb55c1fef42c","sha1":"0bc0499eb539b70d16c9113856147eefc5b7688d","sha256":"7b8aa6b848cafe7997737bdfc95a1e91ceb6e1435ae1ce39b544140b96bc1a86","sha512":"68eb10b94b0ed18b8c0784c333448d16aaab68a271a923f430a26aba9fef4b6327babb04eb7b9d26f3a5637fbbcab71f1fe8a5a5d247947ba0392a7d5a3e857d","ssdeep":"96:3CCgsDr3ofiZEn8ANv93+QDu5YZ/o27S7EVidvKSjbJE+C5/eGX2fmgVx0/brF:3ldrwoE841OWyjgViderMpVqF","tlshash":"6bd17d5ff2c4cdc618a90c3e2322e364d12298b389d2f55fe465186bdda12f38a01e17","first_seen":"2025-12-12T09:05:03.544039Z","last_seen":"2026-07-23T14:20:32.974162Z","times_seen":8,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":176,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/index.cc298949.css","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:49.928Z","timestamp":1784816389928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/index.cc298949.css HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490331\r\ncontent-type: text/css\r\ncontent-length: 26515\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6a335452-17998\"\r\nlast-modified: Thu, 18 Jun 2026 02:13:38 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":96664,"size_decoded":26794,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b23ffbdf507ee417fc3c7b7b242737a7","sha1":"eba2371178176221506aff0dc474570e47562e55","sha256":"97fafefc6bb45ed52a6930fd2fa079e13da77929f11bc7b813d5f09c85ff0f36","sha512":"c5bcad9b474333689093a848601b2871dcd50e04fbd2592ebee0053bed1c540a95f371e84db5bd34f641345bff4cfdf3938a9266b3280243f95fa7cafd6e4519","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGJ7eh/nQhlvbc:hApuK7hmV+S1Wu3iG41nQPI","tlshash":"b993f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2026-03-22T00:30:56.219993Z","last_seen":"2026-07-23T14:49:40.072561Z","times_seen":435,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":605,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/hyperliquid.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.142Z","timestamp":1784816393142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/hyperliquid.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 759\r\ncf-ray: a1fb5299ae70dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfE8EGFJIZzb8zsMU1orYibfenJYcQ0X0Yb4CjpHVtDQ:ccca3ba0bee6b94ec400eda5aafe5ff8\"\r\nlast-modified: Wed, 04 Dec 2024 12:55:18 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=24+0 c=0+1 v=2026.7.0 l=759 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 266;u=4;i=?0)\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGrwBVkBklDqMcQ7vFLtT7nq7j%2BRcOaD176pVwAAnlL3ZOhlrk1gIc31Ym84LMsayqhIVS%2FyOZRD0L2ffrrsuXHanx09zvNQwbytGAkb%2FdnXsWSQuFTbLj7nOJ2JY6A%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":759,"size_decoded":1875,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"8f12318cd9e4a520a2143be5b0265d96","sha1":"eb5e01a1f78a1240bab1af59c5ccd0195da3b415","sha256":"2057834e6b985e7cd8c0a5355e79cf98ab6a3363b6fb28cb660554e299476ee1","sha512":"d2c3e9158f73201bf5d981b98d53848dfa07c566a577604da724f116f2164636878caf5b62a49f9173ab6a31d7ac19e8f1eda777e182d0452afdc6d8f0122c3c","ssdeep":"","tlshash":"fc0105dbb11a2e18aba88c34254164c04ee3248040a5b35b08e7d2e3b5c2dfc92c6286","first_seen":"2026-06-01T22:47:29.902473Z","last_seen":"2026-07-23T14:20:32.975244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/usdc.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.134Z","timestamp":1784816393134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/usdc.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 7709\r\ncf-ray: a1fb529a9e2d56b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfyLW8ZdjWY1ZslGsrm3UUvjl9JYcQ0X0Yb4CjpHVtDQ:97adee9d780ace2a5549804683ea8032\"\r\nlast-modified: Wed, 02 Oct 2024 14:58:03 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=21+0 c=0+5 v=2026.7.0 l=7709 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 912;u=5;i=?0)\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqp%2B7JiqvmTNt7OTohoq53jJQzYrTQYH0CrqKCnuVbcxkeaIykItb15Lac7H5xuJmW5XgWDSTI94z2DpqwpHKOay7%2FE4udGQ6Ey16Q%2B%2BpI14QreRCF8heuHo7ONDiTs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7709,"size_decoded":8829,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"05fff689fa7a65fb8329d5511a312e93","sha1":"bf6c66a6ccaffe87d0b550f70ac81ba491be5778","sha256":"0b37a1f13da83353ca8819aea3a9e46a4891dd970fe699b1a43cc3a6d6eb176a","sha512":"dea2febb5ae6393ac87a1f661ac37866e91a3263fbde48e7b1b320c58e392e5680835c3a47b6642e6814afa220bf8bb1501e1452cd3b6c9ebb2f391e557f4780","ssdeep":"192:rilQY41yrgrzu/lAxfiV2/GmLu4P3fi09rPMANoYH+:rir42RlAxfY2/lLu4f6irkK+","tlshash":"6ff18e87548db92cff15bd42426436ac980a0b6f0b7cbeb7b62b03df5c45a169c0d352","first_seen":"2026-06-01T22:47:30.063895Z","last_seen":"2026-07-23T14:20:32.976296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":184,"receive":0,"ssl":230},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/solana.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.138Z","timestamp":1784816393138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/solana.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 6336\r\ncf-ray: a1fb529a9e2856b4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfX-2SO91cSm_-5v9VjBKESCQKJYcQ0X0Yb4CjpHVtDQ:48995a8cdd77daf01d2d04a889af1e0e\"\r\nlast-modified: Wed, 02 Oct 2024 13:47:23 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=20+0 c=0+5 v=2026.6.5 l=6336 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 825;u=5;i=?0)\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxQ%2FicWcyPxqIafLuo1Jh3C3rZ6S8Rn5kiiKGDRp8DkPouIHilrhq7N8wrXbAEiKakhHQc0%2Bbmvrvse7fVK37cxbp44FtROOm3G9xb4gPsJh7Y4Am%2FWex3XtQ3qJHlE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6336,"size_decoded":7454,"mime_type":"image/png","magic":"PNG image data, 203 x 203, 8-bit colormap, non-interlaced","md5":"cb5b3956c28e3411425e32e9c1b4e663","sha1":"c01f8b2d1a80a43b51dcbd6bd8e75f052db3b7c0","sha256":"ae1bb5f79d25f964bf5b9b3a174ce8ae5634f0241846ad3ff8ad0f7ab528050e","sha512":"662c06007a29c99bed68757ab0864cbbb40001753cfb43df004a4e701f134dee9e0fc2587e444833569f88bdca22b848d7099a020e47994c4b82466cf9f5913d","ssdeep":"96:+LWXSHz1GpaVCCCMc1ey3YtlvoiNoERXxCuBC2bv7iRNovuwQmIY4kFJfVarcReR:mWXSJ+as1N3YtlvLzXzVbsSvqYnMrvR","tlshash":"76d18d805bf40f074acae24f51eb9e52eddb2b61784dd33e9c639425fa068c449c492b","first_seen":"2026-06-01T22:47:29.98392Z","last_seen":"2026-07-23T14:20:32.977499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/js/chunk-vendors.0c348ef3.js","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:49.931Z","timestamp":1784816389931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/js/chunk-vendors.0c348ef3.js HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=2490331\r\ncontent-type: application/javascript\r\ncontent-length: 245467\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: W/\"6a335469-bb7b9\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:01 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":767929,"size_decoded":245761,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37228)","md5":"0243b32451bacc7110c5a86a8c9c881e","sha1":"9a98bb921be35c174807222a554596b2f113b535","sha256":"c280c60feff3adac5fdc59d7c99140d4bd2cd7647be4b42383e7cbc3a2353d00","sha512":"f24d8dad08d5d73b81d31218b5351fd86ae3c0a237d884aee71bb624c06fac305df15a6f01d7f4e78979c51591c0dc756a1332d01d3d50d821cbc463532d0594","ssdeep":"6144:eGwVENCHIDCzg8kprgEq5DVXsH1o4UIe7qtJ2b/F9sqBv38FE:fwaV+z9d7c+4peWg/Z38W","tlshash":"b5f4f79cb285b0a607e761f5003f220bb27b6968b40a94d5f375e4d0ad79d8e6137f38","first_seen":"2026-07-23T14:20:32.978895Z","last_seen":"2026-07-23T14:20:32.978895Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":1111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/msb-logo.jpg","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.177Z","timestamp":1784816392177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/msb-logo.jpg HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/jpeg\r\ncontent-length: 43957\r\naccept-ranges: bytes\r\netag: \"6a335481-abb5\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:25 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43957,"size_decoded":44187,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 386x384, components 3","md5":"b392a76f12562b10ddf0ecb0ffc623ba","sha1":"2ad948bb3d68c1613a721aef63c4d546c5255237","sha256":"c1e8920cb64f38f0610628f6b5ec32ef0ae3283698b10552cf59d7a98428ab07","sha512":"3069b059ccf1320e990ab51d97cc41869ac2afc412733de79faaed366fef01506fb4877d604aab9951378aff931d769991f8f7e647748e6bb506bda2a3a2f9e3","ssdeep":"768:bY1RLaMV+/EX2CxBSw2db+4HK6wsQ/hRXtW7TUn41ILWFnSQ8b58pZm0RCAGT:01RD+rCxeK6wsQ/hRCTIadc6pZm","tlshash":"4313f2c1f922e305f915493b296dd16af62612ddf82e72512d0eca443e0efc279ce1b9","first_seen":"2026-07-23T14:20:32.979758Z","last_seen":"2026-07-23T14:20:32.979758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/logo.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.172Z","timestamp":1784816392172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/logo.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/png\r\ncontent-length: 30391\r\naccept-ranges: bytes\r\netag: \"6a335481-76b7\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:25 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30391,"size_decoded":30620,"mime_type":"image/png","magic":"PNG image data, 300 x 240, 8-bit/color RGBA, non-interlaced","md5":"f889f5e4ef6e8663c0d91e3d699f0f55","sha1":"5f17772c594da480657eb3e101a88d921b93a41a","sha256":"15b28bdb5a3b532898c056727a8d016d9feae87e3aa58dfdd246de04a22d9e44","sha512":"ec20727fdb9fbd2bec2a7681b5b87de559717393c1df4f8e9da1dc545dbd06a22e23bcf48be1d9628229a0640182b20a9f8007f260b3a09641587b0e7af72332","ssdeep":"768:nVJiQQQv47cR3Mk6wA6GLZCnkyEKvEygAaqa6/06igD4p0EQQQQy:nVJiQQQvwNj6GLgkb2EpAaqu6D4zQQQZ","tlshash":"40d2e05bbfc946a0017c0c5caf9da1cb92f34bd08540ad94b6a6cc2f66310b5fe982d6","first_seen":"2026-07-23T14:20:32.980622Z","last_seen":"2026-07-23T14:20:32.980622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/home.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.907Z","timestamp":1784816391907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/home.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676204\r\ncontent-type: image/png\r\ncontent-length: 2000\r\naccept-ranges: bytes\r\netag: \"6a335480-7d0\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:24 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2000,"size_decoded":2227,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"4c2b2f24b65664fc76ae436379002b8b","sha1":"1398592759f09444a251a8186de4bafbc25553b2","sha256":"8a30db5a626605f81908f03b7b100b782b4c6c700fad38ad995f87c1dc658824","sha512":"096671569640d3cbe48e5764da60d08895ed539abd79f72d46f466435bb5a7e753062d0c53fa9d86179d676bb403818b297e4a1217b34d2bfba3944d9a2d1dff","ssdeep":"","tlshash":"a941ea73cac9431ced12bc35100423b66fa6f5aa19fcd224244391763d73a2077634c5","first_seen":"2026-07-23T14:20:32.98151Z","last_seen":"2026-07-23T14:20:32.98151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/501690a1eea79f5a677943c871a22417.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:52.175Z","timestamp":1784816392175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/501690a1eea79f5a677943c871a22417.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676205\r\ncontent-type: image/png\r\ncontent-length: 38398\r\naccept-ranges: bytes\r\netag: \"6a335478-95fe\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:16 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38398,"size_decoded":38627,"mime_type":"image/png","magic":"PNG image data, 244 x 194, 8-bit/color RGBA, non-interlaced","md5":"501690a1eea79f5a677943c871a22417","sha1":"1fd5d051976adb8075ffb076c2e4826db47e35c1","sha256":"f51cf2f636dcc34d70b494459dcc7b06c9b9664c1c65133fe6ae7defc10ebb4b","sha512":"2601385f0ac01e3ffc46392f5f565ab337ca97ba70bdbc3b808536ac82a2b4419bef08f1fb311c7db26ea3d50f7df33127f33411ce374b658a652db22aefbb97","ssdeep":"768:Augz1uyYi51h5um9J0PBJCTr41dIxuwcI2W06CGJ0m9/hqg40GHawqAa9:AukHrhJuMYLLO2OCC2gl2a4a9","tlshash":"7403f2129326bd28a90b13f06bbe6f22b217e37282c720395d5373455975b23ea1c57e","first_seen":"2026-07-23T14:20:32.982648Z","last_seen":"2026-07-23T14:20:32.982648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.flink2.com/cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/dogecoin.png","fqdn":"s2.flink2.com","domain":"flink2.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.145Z","timestamp":1784816393145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4c1db7df.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 07:28:09 GMT","end":"Wed, 14 Oct 2026 08:28:07 GMT"},"fingerprint":{"sha1":"09:F6:B4:D6:EB:D7:00:9F:69:63:28:93:16:F8:5F:9A:AF:A3:0B:34","sha256":"7F:67:0C:C9:5B:68:33:C1:E6:40:22:26:34:68:1E:18:6B:5F:B2:64:77:04:6D:CF:D8:F4:47:74:7B:72:D8:8E"}}},"request":{"raw":"GET /cdn-cgi/image/q=75\u0026w=72\u0026f=webp/logo/1/dogecoin.png HTTP/1.1\r\nHost: s2.flink2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 23 Jul 2026 14:19:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 10002\r\ncf-ray: a1fb5299ae64dfec-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=1209600\r\netag: \"cfOO81tugSex2l7gfkam-3tGswJYcQ0X0Yb4CjpHVtDQ:a522fb5933eda0513c938c853f390ef4\"\r\nlast-modified: Wed, 02 Oct 2024 08:17:21 GMT\r\nserver: cloudflare\r\nvary: Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-resized: internal=ok/h q=0 n=18+0 c=0+3 v=2026.7.0 l=10002 f=false c2=0 wv=2026.5.1\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 779;u=5;i=?0)\r\nwarning: cf-images 299 \"original is 1012B smaller\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vIdMnOWOECXXtu5vtw%2FKbuVEsuIFM7mRnkyYK7OyUJWBcjR6qyxoCuRhGe4Si0WAu%2BCFscvlPPzmbPTwSG56FHABWME%2B47GSGfGZ6VA3Yp%2FeLu9g05i%2Bvyn9QZqHis%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10002,"size_decoded":11178,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a522fb5933eda0513c938c853f390ef4","sha1":"ea0eac6a0e0def213b9ae183c3ad00edcdbd0b80","sha256":"b105fd1a5e3d76afaccbb096ed5b96d7febfdb1c80a56de1e65e1aa3e6950820","sha512":"01d18d24d5d2965af938cbd04e4aa358d8d2e9f4d84afa72801a428532247cd4906cc01d731cb44a0a7514870bcabaaddfc4d1b582c96d77353ecf5ceb6f4a20","ssdeep":"192:eVWMxuaFpSO3+m4r2yUPkItZ9wkREDvT2w1IHM:wWqSO3+cmI9RdM","tlshash":"aa22aecbe67c23dbaf556082311b58b191172271160e772f345e77ad3c99a02adf4a8c","first_seen":"2023-06-18T21:57:19Z","last_seen":"2026-07-23T14:20:32.983558Z","times_seen":30,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":73,"dns":0,"connect":1,"send":0,"wait":233,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"s2.flink2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.222.174.117","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:53.834Z","timestamp":1784816393834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:19:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 23 Jul 2026 15:19:54 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQa2piIwoNlGY9A0VSAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":576,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-23T17:31:37.483708Z","times_seen":17441,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":0,"dns":3,"connect":203,"send":0,"wait":460,"receive":0,"ssl":404},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trx.xinhuozig.vip/static/gd/img/e16e938cf96030947b09efe91c34dc33.png","fqdn":"trx.xinhuozig.vip","domain":"xinhuozig.vip","tld":"vip"},"ip":{"addr":"27.124.46.18","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trx.xinhuozig.vip/","date":"2026-07-23T14:19:51.910Z","timestamp":1784816391910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trx.xinhuozig.vip","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 08:47:38 GMT","end":"Sun, 20 Sep 2026 08:47:37 GMT"},"fingerprint":{"sha1":"59:F8:D0:FA:1A:48:3F:95:9D:50:99:34:5B:B2:02:FA:9E:3F:D0:10","sha256":"95:4D:40:4E:83:02:E3:61:79:14:4F:DE:BA:44:05:32:1A:EE:D5:D4:61:D2:FE:3A:D7:A7:5B:EE:97:3C:A9:D8"}}},"request":{"raw":"GET /static/gd/img/e16e938cf96030947b09efe91c34dc33.png HTTP/1.1\r\nHost: trx.xinhuozig.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trx.xinhuozig.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=676204\r\ncontent-type: image/png\r\ncontent-length: 7424\r\naccept-ranges: bytes\r\netag: \"6a33547f-1d00\"\r\nlast-modified: Thu, 18 Jun 2026 02:14:23 GMT\r\nserver: cdn\r\nalt-svc: h3=\":443\"; ma=604800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7424,"size_decoded":7652,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"e16e938cf96030947b09efe91c34dc33","sha1":"66d3a56bbd2512f144643e28159d17cad33a90fb","sha256":"04e6e03207355e70852522666b11f3e1668ee64d661d4f00aa328665aa19e53d","sha512":"918d1040000868ef4e565ca7eae5c2c0a65319d2a9eceeaa657eb89e4a91c140e87d67f143e0df279cdd74afab2b9e21580579843a8ec0a42ae832fe5710ba4a","ssdeep":"192:A4kiDZdLAw8s2NnlSnGDVVGoNo6vBKbAIv+eW:A4/AXnMGDbGQo+QbAIGeW","tlshash":"fee1bfdb1157a7fd23c61df97eca1612a2b2539be80977dca976320f23580413f988c6","first_seen":"2026-07-23T14:20:32.98526Z","last_seen":"2026-07-23T14:20:32.98526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}