{"report_id":"58699613-f5b9-4f6c-8c14-b67096e4046f","version":6,"status":"done","tags":[],"date":"2026-04-21T02:03:52Z","url":{"schema":"http","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"70.39.207.112","port":0,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"title":"153.43.25.173/?languageCode=zh\u0026cid=6780513","dom":{"size":335547,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02ef11ae952311e1d47e3c0ddf804eb4","sha1":"ba817b50cd209305e64584f47f497163dad03e37","sha256":"30f72c830327ab60ada4ea9346a7216e0f84858d55aa5db059aa56d2bcaa3c40","sha512":"02083f95a6758269cd90b2228c530bef0401fcff411d492680c82999f04b3c391a5b1d465a1635fb8a1712eb8a2bffd4eefb4b778466c2dfbc5cab19247666fd","ssdeep":"6144:0JoA9ha/wdnftVbJdF994XCRbj/lih3u+f:wUhR","tlshash":"8164dec7aa9c1f82f57b31e4d053b1cd8b4094dd1b7099a87b7780abc36f4e09ac6562","dom_hash":"domhash897fbcbccfad750429fc7913e7eb4c59","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"70.39.207.112","port":0,"asn":3257,"as":"GTT Communications Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T02:03:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T02:03:46Z","timestamp":1776737026,"ip_dst":{"addr":"47.254.187.102","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":36262,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T02:03:46.620002+0000\",\"flow_id\":1819742662959143,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":36262,\"dest_ip\":\"47.254.187.102\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"528swt-1917-ppp.oss-accelerate.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":7,\"bytes_toserver\":753,\"bytes_toclient\":6993,\"start\":\"2026-04-21T02:03:46.139303+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"sdfs658-d95692ss.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ewq48-b16q.0066532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"ewq48-b16q.0066532.com","ip":{"addr":"104.18.17.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1163,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"146.103.72.162","ip":{"addr":"146.103.72.162","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":557,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.1111532.com","ip":{"addr":"104.18.30.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":1,"received_data":1156,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www0vr-swe.wgkblhj508dev8989787ns78nf7568222wg.com","ip":{"addr":"134.122.135.148","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2023-05-25","domain_rank":0,"first_seen":"2025-10-09T17:45:40.592202Z","last_seen":"2026-03-28T17:11:28.710985Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.0011532.com","ip":{"addr":"47.57.218.1","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1155,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.zwems.cc","ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":40,"received_data":678181,"sent_data":21538,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-09T17:45:40.609424Z","last_seen":"2026-03-28T17:11:30.210437Z","alert_count":8,"request_count":9,"received_data":10684,"sent_data":7432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"0033532.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T02:03:53.985784Z","last_seen":"2026-04-21T02:03:53.985784Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www0vdes56-532com.3344532.com","ip":{"addr":"174.35.120.166","port":443,"asn":54994,"as":"ML-1432-54994","country":"United States","country_code":"US"},"domain_registered":"2025-07-02","domain_rank":0,"first_seen":"2025-10-29T18:17:53.806238Z","last_seen":"2026-03-31T15:17:48.713748Z","alert_count":0,"request_count":1,"received_data":870,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"wwwrs-b0e.wgkblhj508dev8989787ns78nf7568111wg.com","ip":{"addr":"172.65.191.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-09T17:45:40.598886Z","last_seen":"2026-03-28T17:11:31.252249Z","alert_count":0,"request_count":1,"received_data":483,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}]},{"fqdn":"sdfs658-d95692ss.1111532.com","ip":{"addr":"172.65.218.121","port":21467,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-12","domain_rank":0,"first_seen":"2026-04-21T02:03:53.982659Z","last_seen":"2026-04-21T02:03:53.982659Z","alert_count":1,"request_count":1,"received_data":835,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wwwevw-156bv.wgkblhj508dev8989787ns78nf7568777wg.com","ip":{"addr":"45.125.14.193","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2023-05-25","domain_rank":0,"first_seen":"2025-10-09T17:45:40.605986Z","last_seen":"2026-03-28T17:11:29.346896Z","alert_count":0,"request_count":1,"received_data":461,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"153.43.25.173","ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":335446,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.0033532.com","ip":{"addr":"104.18.27.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T02:03:53.9849Z","last_seen":"2026-04-21T02:03:53.9849Z","alert_count":0,"request_count":1,"received_data":1156,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"528swt-1917-ppp.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.102","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-10-09T17:45:42.574565Z","last_seen":"2026-03-28T17:11:29.646202Z","alert_count":0,"request_count":1,"received_data":4944,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vant-DoiDA9Rs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"e0831d91eb604dc38bf02b7f775874b2","sha1":"4998ca3f37992f9877ada4d981891d237951b356","sha256":"1a7b5ffded39ce7f50776e984fffb8ee389fc001b33f0b291ccbf5146e601583","sha512":"cb8140860715d26a6f6e8dec72492020f99f2cd80e55189bb5ccc59521f742cee47ec185991b698b0bb2a1ad4a627b096d719768b016a09f6d2b66f3f34a384e","ssdeep":"768:woxNnhadZoeRwG5fccpM0+/uQOt8kGxrME8Eu2Oada3x70Xan9EFf97h6NGXIUxo:ioMnM0+Y8T9+J","tlshash":"dcd21ad43046b43b53f686ea40290345b3292ba5340ac4ecb13ceddbb665c16b5bbf79","size":29462,"data":"","first_seen":"2026-03-21T10:33:31.197376Z","last_seen":"2026-04-21T02:06:10.088381Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/utils-DP5omx3I.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","size":24038,"data":"","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-21T02:06:10.055827Z","times_seen":9192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"11a378f21b54b4438a697932ddaec96b","sha1":"c2169536c89b745692611d86f7cfe82a61d96bb9","sha256":"c4ee1097204a4ad25b34d2287d31e56d6fa888d491cd78c20aceb8fe94ac2d85","sha512":"7843609a044d76a6c91f1e934972fac5825b925d3c39f8c7ed90a214fd47741348bb41d33550f17e6c20d99aa3d66abdae72a5ae5a3c82c78fb641a8fb409c21","ssdeep":"96:Ja0EppWoqOWmWj/UYLbs6WbOXOaE+qsqdFjszNw+IoVM7R:epypLbCOXOSH4w+uVM","tlshash":"a1b1b78a714571e502ef6129646fb217b279797a694ce800a213e4e23c7cdcb43b3f5b","size":5168,"data":"","first_seen":"2025-07-29T08:43:47.856388Z","last_seen":"2026-04-21T02:04:21.036553Z","times_seen":11763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4b396fe650bd55bf6e659f11a35dd74","sha1":"3e2232dc939a65db6b01d87d14b5c030d61ae429","sha256":"5694bc787749ef4f21086fa56f4e8e410095bec9c1242129c8bfa232ca9eefe2","sha512":"46572a719d6b915c6691bf3a739f5e389f49ecfa360a50c7be862268bc9d9e138713809f306584a325fa12c6b56d179aa57b35bce518eebab0199aeadd1b0001","ssdeep":"3072:MJo946QPVTHwShJLa/wdnWGtVbJdF994XCRbmHR6QEV5/l4immONNZorNkOq:MJoA9ha/wdnftVbJdF994XCRbj/liht","tlshash":"0164bcc7aa9c1f81f57b31e4c063b1dd8b4494dd1b7089a87b7780abc36f4e09ac6562","size":313271,"data":"","first_seen":"2026-04-21T02:04:21.037565Z","last_seen":"2026-04-21T02:04:21.037565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"3751cb68aab812e3a7f12f188e3d7153","sha1":"a1f073cf4f3c0fbb1abaa87d21bfcea18488f6a4","sha256":"98199a5433eeced68b21cd08229132a7ecc12544e291df094c6df7e5d18255d2","sha512":"24f91eedb998d52cb188f6fa270f80e4ac295880b082642c94c1be96256ee12140b47daaf5c910c2723b1f89825ba1dc2d2487df60d06e079c69625fbb356ddd","ssdeep":"","tlshash":"7d8004d34d3d0145574301d1c4077404f33f105d440077303011f010504413c0705100","size":36,"data":"","first_seen":"2025-06-17T23:29:39.076247Z","last_seen":"2026-04-21T02:04:21.039737Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-core-BbiFjrsZ.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"d35d32c55efac286ba08e5c33233c05e","sha1":"de06712cff5235d39a38d51cf3cac9f3cd75a042","sha256":"237fea871343d1a14189d135fcef684ecf12c154202590c08430a9f9623365b3","sha512":"5340121a1858fd7c876cbd67f5189fec795c62f133fb841e67b05cbfa1b2b6dd0cee216153b7597656fca42f5fdeab14c833109b4c08cf9e265c7dcfb8c562ae","ssdeep":"768:sJNHhYJGVFK8wMjUXn6pt6RDazH0RXTmU9GssBg27Oo66MdAMLu9lExfqe4amDqq:g7xjSmXv/h3r/iCkv5nrfS","tlshash":"847307e83192b46253fa19e2007b0406f379295a3849d9d8f26dfddb3e7240550bbebd","size":74290,"data":"","first_seen":"2026-03-21T10:33:31.214025Z","last_seen":"2026-04-21T02:06:10.07828Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-DRa6xXqm.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c919e82b39aa96c449f86097c8e9ee","sha1":"a38f251275f0bbe823086d1bfaa9f18bfa9102ff","sha256":"af80330f0513536259722e3d1b18322d606aac99e8289a95add91b9019a6b3c3","sha512":"b56a791085c995de4bd0d0eaa8c0e8cc1ca7ecf1bb9749f35854d7b8da7dbeb5cfa444384a961aab8d9afbc4d260d7b7b80239f9c9f8160cd0eab3b1ad063b54","ssdeep":"1536:izNnbxfH1NaP0FnELL/t1oU1nvfc0tH6iimAsw8fUPpS022C:enbxf160Fn2H13cCaLSwEUPpDC","tlshash":"d3c36cdeb1a6613863e608ac617b1501b21d3d467546c4e0f5be8e653ba7c08f36bf2c","size":122163,"data":"","first_seen":"2026-03-21T10:33:31.228292Z","last_seen":"2026-04-21T02:06:10.082053Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/?cid=6780513","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ca4795d01fe7af0811ca585bc8a3059","sha1":"01fef38596b762a66995e8376f876ff227e113a7","sha256":"ae1dcbf8cddb27c1e58f556faae94c7599e71e2ea6181d4a5ba0b6fe84dba22b","sha512":"af4258411e130e75b374b24fa15819cbd2757d91e0520844738ef7b4b209b4dd0646778409fb2e0ea27168db732ccd49468f25ff89c714b8dd22edc32a1b29c2","ssdeep":"","tlshash":"867000000200022888202020020a2380b800a8203a80022080080800202000303200a0","size":18,"data":"","first_seen":"2026-02-14T09:17:29.609873Z","last_seen":"2026-04-21T02:06:10.09914Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/zh-DH7itq7n.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"59baca1efbdf677ec3b3b94bbdaab89c","sha1":"563e7c8b352946ba19f71591c15c418893c4e8a4","sha256":"a00bb24989f0c16dbc866c683b214031ba6b7119ba6d6b367e26ffc798dcba91","sha512":"e2aef417bf9efb9b9cf4594356224aedabae7f601d7f39795837e5e2d82048ac6cee93802c0e856df6dee71933354c989894d49399bb4c4be1a41723d63d6cc6","ssdeep":"192:O3FyGn/aZJd4+Ms2QmPblTe+j1iU7hQbHyuej5Ov+H:onQcfxDk+piUMyuejAv+H","tlshash":"7702e9d507ec9ef8464a02d96f1b4884b1552da7e6e6c9e41fa688f5304db0f130319b","size":8504,"data":"","first_seen":"2026-03-21T10:33:31.223435Z","last_seen":"2026-04-21T02:06:10.089646Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8efbf7a9d027e30d21699b21cdb00ecb","sha1":"d64ac1669b34ddc73a4ed164247f79948437cf3e","sha256":"2ed86a3c3651862164446b66facf35dfcc9bde127de3d574bfd823d45d0ff9b5","sha512":"528cf08a62311869c953e83d0c9a113eb469fb07e245e24a02854b0ad8a83efc41c55917f6fc478b1fa4808f7dafeb37e44c14f1870dd4057437f4940ea2a411","ssdeep":"","tlshash":"2e01b179b264529711a21cafe38736153432404a18e1c05291096d4434fce9f811bfc7","size":777,"data":"","first_seen":"2026-01-09T11:48:04.975626Z","last_seen":"2026-04-21T02:04:21.041568Z","times_seen":4442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/?cid=6780513","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"cefddcc19ee163ac654e379a91a29915","sha1":"e403b12dead586bbd4f73814581d256d8f2ec8b0","sha256":"d29b23c8f78d4e845d001b8bd980eaa8e22e5c77664b682e84c13a9e798894ae","sha512":"cdfabfa001e22d9d7ac2071c836a87e5c3b0d24b1352c7458d855c7bc13cdeb1b3a8bb63323e2d39f7c3f488de8c4e92a3e7c1271b732d986391098fb1b2b516","ssdeep":"384:hdz1hTXx2IGXyAk+r0U4YQdtmHaBGuGvh8oreqqS9i8mnGzeku:hdz1JB2OAfQU4LXmHGUePqwDnQC","tlshash":"f6a2e9c7a68c6f52f27a32e8d161f1cc2a0449c827748599333b809bc75f4f06a9f0b9","size":22239,"data":"","first_seen":"2026-04-21T02:04:21.047911Z","last_seen":"2026-04-21T02:04:21.047911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/crypto-BgUpi7_6.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"d9ac6ed0b1d211b5660f5123b9bd5060","sha1":"c4850b0b3481dc33ff6d21c3f897a7da1d22be0b","sha256":"a90996ea5ecc94b9d190f36ec4af4f63bc1602a45f5e65677f0a3a164e18f9ec","sha512":"f0b1be567ce42bcf1a534870412630e818fd58a2173d139639dc693b9a9b9314068ae366cce998c453b8aeac9ad6f67903018d0e1c056b3d95059b5fa0a6f9e9","ssdeep":"384:zNgEnuTqRZ3uQAhR39AK6kEBxMZVhYLo3i2DT3GD:Rn6mdRAhXCqZVhYai2DT3GD","tlshash":"969273ceb9e9b580039334b8093fa01bf1a7246555adc564e3a8d5ecfdb809de127d38","size":19518,"data":"","first_seen":"2026-03-02T13:06:26.812304Z","last_seen":"2026-04-21T02:06:10.063844Z","times_seen":680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/?cid=6780513","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"494ab8c88e9a8cfd9aa511a663c925c6","sha1":"4816e303ad4a09ef00d54305b7b9e2e51c9bff4e","sha256":"9de249453f6780a3274d7fae16d04d230aa9a5b70b57c7d094bbd764ceb8cf4e","sha512":"3fb9b24dc9a904670f2618493304d5b9edf4fab17eca192479cabd99a0a86a4b4a80318baaafa817311bc1ce86d533e4ed044bd9915c4a3b2219db7f0fed6474","ssdeep":"","tlshash":"68e07d48ff28c7f316ce28a7516e770858d104d58c1b58024cebccc86935ed87291527","size":313,"data":"","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-04-21T02:06:10.104837Z","times_seen":15236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb38506362271d4d0c4fed02457f199d","sha1":"b89858af0c8179e558a43b2689523194c1544f32","sha256":"85c3212efb12362eb1cde0e8c04fec8d210bae14de3ecb70b2f2667309b39811","sha512":"fdae8b490bebf0c5daf422f4f97470f8415fc161e111e4527f6fa78b0accd5292918ed95fd73e87f08d7c58c5af673be841e6411acc2aaa82e74f775e11ad5b9","ssdeep":"96:l+DGthJzZio/62Dfv5unpBNwJkkW2W8PLHvSkHZ:l+DMhxZFC2DX5unpLDJ2WeOM","tlshash":"63a182a3232471b160fa089f632bb7807e7336186d0445e1105edd94316ce9fe2ea6fb","size":4831,"data":"","first_seen":"2026-04-20T18:44:48.864974Z","last_seen":"2026-04-21T02:04:21.053024Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cc5acaa3fd1127734ac14a74bd7e13f","sha1":"0f28b7b4779d07566385525337de93b6e09247fb","sha256":"4b594a62139b3f1e5518b6505ef1296824944e56ca4f2397a218762a3bd923dc","sha512":"af592d814c3a343dbb3c432d759a54ce9e9b87bfaa80051a53513adabadcdcc80b4f813476ad791d5dbec4381f22a4e1bb133b7f41487fb85bd9fc30e4e11f7d","ssdeep":"","tlshash":"ced02bb4331060b012d6c9efa28db2d45e173f660800d4724c4c50d428c411df4f00fe","size":279,"data":"","first_seen":"2026-04-15T16:50:03.132523Z","last_seen":"2026-04-21T02:04:21.054419Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/?cid=6780513","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"a087c982ed03833b078b24a89d646f7e","sha1":"d139b21432e55c149b8546c1f6b69a27a6c7a522","sha256":"be7a71480316e57aab80ad87c5314cb080f9e26ae32ad04bda48e4e478f20355","sha512":"67405a0cb9d058bcc3aa306f631fb7605e0f60403291cc73e67c273315eba6a1b744016946a7899d1d895b70e9e583f75847ab070bcad6039745f44ad556a820","ssdeep":"","tlshash":"eda012c500000a4422ef0005c737370870eb82d60c045c0004020490339430f82176c5","size":84,"data":"","first_seen":"2026-02-14T09:17:29.614713Z","last_seen":"2026-04-21T02:06:10.106007Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/polyfills-BkzohEkc.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"e31e4afb53b47ad93f1f94c58508ff2d","sha1":"ed0a05ae7e3a1c71b9c771144279a3e67c1971d9","sha256":"7d8df769625fe98395cff2056f13f2433e0249d8e0964562518456cf48b938bf","sha512":"f2d00e0a56715d072d7017bae61687fcd283ab57807621197a3ba3df4b75acffe0e442e93ee8cb174d305811e9ed69b1ee7d6848001ff7fcd4152b530b95b9ee","ssdeep":"96:cLy4jWt/WSSCpNw0Y9mnpYf6SXl6hQvXzEY8iWu0VdX1vSjvguDdrwaH:h4jE2CpN8v1Xl6Cvqu0bgj4u7","tlshash":"99d186e87291b07042a7a2b6d02f1507f239b97252edd0d0d365ecf0acb949d4277f29","size":6749,"data":"","first_seen":"2026-02-06T16:41:27.155404Z","last_seen":"2026-04-21T02:06:10.070375Z","times_seen":1353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-ecosystem-DfQjWYvs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"importedModule","is_inline":false,"md5":"eb638f110641911724b3188e3fea2a0f","sha1":"782dfe255472102506120fb73fb14d9e2e7ba075","sha256":"ff0ee7e1d3aa2e01adb457c13f318e1adc1a6dce3dda67868ca6c8b70afcf1bf","sha512":"7c24e185d6caf5d42aed6ca5dd1291c1a66b4938ae856e575d2d8615f7c735bde4fd47605e614c8451c2013668ac1ca93821691cf6a159067554245091081b77","ssdeep":"96:trJGxFiRKyxeF1NFjWtEtCEQxST3VPxt5L2kJOLUtNRCESkG6ToEuvSOpeFPTbQP:trYiRKD6tEtvQxST3bL2dUtNRRSkGCoX","tlshash":"25b1da9875937071733b4c99d07b010ab33839a4348ee4d0a42fafd53a619e293b3d9e","size":5327,"data":"","first_seen":"2026-03-21T10:33:31.202148Z","last_seen":"2026-04-21T02:06:10.054852Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-D_vizf3_.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d3565561bbc7ef3791aff0e0b826ef","sha1":"3973c0f02c14daebda78fea2ce20822f1baf3894","sha256":"32f4f448da90fb42b6dc34badaa69f6b8c24118880a803ac3f25a2c48290e595","sha512":"dec1429541265158e4cfd79777ebee4778d777568f781bb0a067b993870381478c7a09d9ac2735e551846c54880911f91176b36037f697c3f67b1c242e9eaac3","ssdeep":"192:44ESLwe2cR+NQq6SkK7ZWVFR6EsAS/Ois:3R8eDKYI53e","tlshash":"41d1a60dfc191db5d37248c8f685025811256b5296bcc2b1f6fe5ba81ee0c609faf8bd","size":6529,"data":"","first_seen":"2026-03-21T10:33:31.219101Z","last_seen":"2026-04-21T02:06:10.076061Z","times_seen":455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"494ab8c88e9a8cfd9aa511a663c925c6","sha1":"4816e303ad4a09ef00d54305b7b9e2e51c9bff4e","sha256":"9de249453f6780a3274d7fae16d04d230aa9a5b70b57c7d094bbd764ceb8cf4e","sha512":"3fb9b24dc9a904670f2618493304d5b9edf4fab17eca192479cabd99a0a86a4b4a80318baaafa817311bc1ce86d533e4ed044bd9915c4a3b2219db7f0fed6474","ssdeep":"","tlshash":"68e07d48ff28c7f316ce28a7516e770858d104d58c1b58024cebccc86935ed87291527","size":313,"data":"","first_seen":"2023-03-07T01:24:09Z","last_seen":"2026-04-21T02:06:10.104837Z","times_seen":15236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d454f15b37db78b83b5baecdf743f42","sha1":"11e110aa556c4b89523c4000301e178255e0011f","sha256":"dca38dbbce2b613d73df9c1739cac926d4c518c99c219d33d6f84e22718fc21d","sha512":"ead37b7d097d23e30b78a05c79477f8ebc1efc05fa1cd988468e174463de10d22743f8174a6bd840d59e2556a3faabb640a0164829b5e63fbe15873dff11e639","ssdeep":"","tlshash":"04b012d504040205bafa0105d717370cf0f701e50c48680040030414234434f461ead9","size":95,"data":"","first_seen":"2025-10-09T09:48:44.9381Z","last_seen":"2026-04-21T02:04:21.05743Z","times_seen":9003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/ipacdn.txt?t=1776737023194","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"GET /ipacdn.txt?t=1776737023194 HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a0ccb0b17767370235103478e4793fde4c70295bc423c417ad268f2a06612;path=/;HttpOnly;Max-Age=1800\n__cf_bm=L04CWO1GyueCwxLdro9SsGlMoen5WENIoBWSgjNisy0-1776737023.2929978-1.0.1.1-aMSdyGEgVnljeg6gjPuEImepq6aqTIbE73CLgbWoF9MjQvpNkFbJaRzffyi90w6dfTjcRQMRW3yNPrFoFVHOG5gsT_319_PMpk1Pvwxb4QoIPV8jWz7xMZ9a5_0sffIz; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:43 GMT\r\nstrict-transport-security: max-age=15552000\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\ncf-ray: 9ef8d05b9f07b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":92,"dns":76,"connect":1,"send":0,"wait":335,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/hall/api/netstat/point/get/static/idx/6780513/idxType/1.json?t=1776737","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /hall/api/netstat/point/get/static/idx/6780513/idxType/1.json?t=1776737 HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: db0bd5c8-8e51-4aa5-ba60-ec8604d1f031\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: db0bd5c8-8e51-4aa5-ba60-ec8604d1f031\r\ntimestamp: 1776737026\r\nsiteCode: 1917\r\nsign: Zu76Lo8TXTJHq5eN8opkkOIFPnVx6bmZoJKQb0wtBcZjboBAY7GZzCerAb75S2Jz\r\ndevicetype: 4\r\nplatformtype: 3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\ncache-control: no-cache\r\ncontent-md5: 78iLjPSGQ6l33ujr7lquPg==\r\ncontent-type: text/html\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\netag: \"EFC88B8CF48643A977DEE8EBEE5AAE3E\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 12598442108753170511\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB029B1BC933386CD29D\r\nx-oss-server-time: 5\r\nx-oss-storage-class: Standard\r\ncontent-length: 310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":310,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"efc88b8cf48643a977dee8ebee5aae3e","sha1":"50b89d535d399493558d0bde1b3225c80548eb2d","sha256":"68f62426c319126501255a6007a3eafcbe6d6b1cd1cfbff9356a7f074ec69feb","sha512":"a1a87517d23d55ac01901a3e09b67bfae830c429739faee843c00151a66ad96e31b831402de959a664aa403e90e88258db641d3dbfefc066f2bde9f80839df53","ssdeep":"","tlshash":"63e0c2c384f2940da155426109e1f2081aca95eb5b47984e3dcda7289f8ab4dc9d798c","first_seen":"2024-12-11T10:09:32.928381Z","last_seen":"2026-04-21T02:06:10.092309Z","times_seen":14287,"resource_available":true,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/assets/index-BRScM-RS.css","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/assets/index-BRScM-RS.css HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31622400\r\ncontent-encoding: gzip\r\ncontent-md5: 3jNASNPcFMhJ4uhFXUmkHg==\r\ncontent-type: text/css\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 11752589779093394466\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB029B1BC93338B6D09D\r\nx-oss-server-time: 14\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7347,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7346)","md5":"de334048d3dc14c849e2e8455d49a41e","sha1":"31e1aefde50bb090ca7150bb216a30ccc04a7d7b","sha256":"8b402e45f21ffc93142d88795cf1840f8cad439eda177dfbbd8171061593db3c","sha512":"fd1ad0f1dd8a851a10fb88bc8d372ec2c0d8829920783078e3d107993c44f94fe10daa63c6eca8283d30414444df0fd88a0e896fbc8d222f4f37e1fe9cd888d1","ssdeep":"192:o1t1001pNczitLq1Y7pUzvNm+502syTiP:oj71nvQm2zvF02snP","tlshash":"58e15b79f82d2c2dca37d06dba405b8c4670e2a5d61f2a99f543b1054c8f75b3c6819a","first_seen":"2026-03-21T10:33:31.207944Z","last_seen":"2026-04-21T02:06:10.097533Z","times_seen":455,"resource_available":false,"data":null}},"time_used":1426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/statistics/domain/pointer","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"OPTIONS /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-saas-server-id: 844988bcd4-9qhp5|28085d45c526c170b6d1fdf2dcb6af61\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0f6b9117767370262202067e50bab31a3ac65ce19cbd1155c4b1d1b7f78d;path=/;HttpOnly;Max-Age=1800\n__cf_bm=PNC2jVIGzBEbtfbSRdGFANOWvxi_4ipc3U.LNQp_phM-1776737026.1288495-1.0.1.1-ZkMAKwHM1hZj.pkWn8iIg3Hs7MZ7vWMQlcia..bqUF30SoNxHhyA7oFfBDlxgqfyerReTwhRJk0FBw7SOKDSJkUyN4OwMRZyAECkSQ0PoQK_hvjED9chq6TFJI8Iq8zh; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:46 GMT\r\nserver: cloudflare\r\ncf-ray: 9ef8d06d4c550daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/statistics/domain/pointer","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"POST /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: cb1b4eeb-7534-448f-9779-00447ea1f1ab\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: cb1b4eeb-7534-448f-9779-00447ea1f1ab\r\ntimestamp: 1776737026\r\nsiteCode: 1917\r\nsign: H0tpf6UYa7wSgeqOV9jhUj8BP8682RA++Q0D+h3TY3fokSWh8cLlWSAJMQ0y1Zr0\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 78\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":78,"data":"{\"domain\":\"www.zwems.cc\",\"deviceKind\":3,\"visitsKind\":1,\"kind\":7,\"cid\":6780513}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-trace-id: 433e99224ba6aaebacfbd6c69607d98e\r\nx-env-go-biz-statistics-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-gjtbk|93acddda86fb507436111d23a9e0d95e\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0f6b9117767370264142190e50badffa0bbbb3725ec076b86bda823b6f1b;path=/;HttpOnly;Max-Age=1800\n__cf_bm=q5AXTBgWG1YO0DyUpKSITo83pvb6wFD0eY6YTT1M4tw-1776737026.3220565-1.0.1.1-jduoIR5iF.ogJHx7cbAXIwg6SI6YbriYNtK9e1fkCDEUQMtAUk.de2HZ78Gc23TZPnHz40F3uv6CYC.IUkTCVcOHEpoxAasfsHjy.7QZPev7ZY0.uCesDL8SbPuEM6bU; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:46 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ef8d06e8d5f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d9f10689583699467e5730f7bba98a00","sha1":"b6e8c7c98bfa1fa5d99084b9768c5e3750e9b89c","sha256":"b28883d1da3520ba8fbc0a5aa9a94f80793d6de4a114551ac2ed1718d3a7932a","sha512":"5150eca3d43541932c162eeba9914960735bbe4117239ecdd4c7fe9605122a0c1aabdf4bb3ac7dc576cbe575685c30ba9edfa4600c64d1c1174c3396cbe3e52a","ssdeep":"","tlshash":"c8900291431d864254456239a10965c5611854578855c3188e5d096808a80961001195","first_seen":"2026-04-21T02:04:20.978444Z","last_seen":"2026-04-21T02:04:20.978444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0033532.com/bewcdn.txt?t=1776737027194","fqdn":"0033532.com","domain":"0033532.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.204Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bewcdn.txt?t=1776737027194 HTTP/1.1\r\nHost: 0033532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-D_vizf3_.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-D_vizf3_.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: lNNWVWG7x+83ka/w4Lgm7w==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:47 GMT\r\netag: \"94D3565561BBC7EF3791AFF0E0B826EF\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 5094972406357050108\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB03300C86383769A365\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 6529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6529,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6065)","md5":"94d3565561bbc7ef3791aff0e0b826ef","sha1":"3973c0f02c14daebda78fea2ce20822f1baf3894","sha256":"32f4f448da90fb42b6dc34badaa69f6b8c24118880a803ac3f25a2c48290e595","sha512":"dec1429541265158e4cfd79777ebee4778d777568f781bb0a067b993870381478c7a09d9ac2735e551846c54880911f91176b36037f697c3f67b1c242e9eaac3","ssdeep":"192:44ESLwe2cR+NQq6SkK7ZWVFR6EsAS/Ois:3R8eDKYI53e","tlshash":"41d1a60dfc191db5d37248c8f685025811256b5296bcc2b1f6fe5ba81ee0c609faf8bd","first_seen":"2026-03-21T10:33:31.219101Z","last_seen":"2026-04-21T02:06:10.076061Z","times_seen":455,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":534,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/agent/downloadSite/regionAccessV2","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"POST /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: 1e8102b6-4679-46c3-a019-fce93341b3d9\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 1e8102b6-4679-46c3-a019-fce93341b3d9\r\ntimestamp: 1776737023\r\nsiteCode: 1917\r\nsign: 5w6h6U9Q5tUrVhcxNytqTU0+tvn1TPLsAvnOPvljVI0gA7uGFw8SN/6wst1wCQVW\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-trace-id: 2bdf9331499e5dc71cf340f227185667\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-vfnzf|b69a7f063ae55a32f4824beb30a60a4d\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0ccaf017767370240444806e439e1f014df2c96cf074074f7f436062afa8;path=/;HttpOnly;Max-Age=1800\n__cf_bm=D3Goa3LsFCZ2xNrDMdGasPMj3QSaMl1GbW6himGjIB4-1776737023.9434094-1.0.1.1-2y417TdUGwVG2tu1S4JxT3sWj_dAyDQr8K7f9_QTvMcIXm_hvU5FNZmpJXHaxEBg8OpXACofrB4l4NCwUfg.Fssy1DPupz5VKouocYdtgXyMIL3gWqoIyKeUDuwCEsUC; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:44 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ef8d05fa8bc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2cfe3001feceab78d4feefdf4c4ed78b","sha1":"97220686660abe672d6e0f16735d445324611aba","sha256":"5906d7bc20ba219338b5ec604358f65aceda97658b7a03d26a7097adf7c32323","sha512":"bf4825c5a14582e22ef63ac840812895796f34afd4d6a5d85e7466e792a47724810f85d9ecccc3c4f8a02b528f24bfd977b38bf79a6d51af9e1b684fe3f478b8","ssdeep":"","tlshash":"96d05e1e0735adbceea592a9602a6ed575ec5001204c9338fdde2e2412d839e833129e","first_seen":"2026-04-21T02:04:20.982325Z","last_seen":"2026-04-21T02:04:20.982325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/siteadmin/upload/img/1934235873067925505.png","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /siteadmin/upload/img/1934235873067925505.png HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\ncontent-md5: RNTc3GdgV5UW0j1mpaw6rA==\r\ncontent-type: image/png\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\netag: \"44D4DCDC6760579516D23D66A5AC3AAC\"\r\nlast-modified: Tue, 12 Aug 2025 10:42:34 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 7297448822015274117\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0236F3BB3639E38D08\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 58616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":58616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"44d4dcdc6760579516d23d66a5ac3aac","sha1":"8723340966f0f068f886f511a8599e947ea58b98","sha256":"c2f88b4ea5a236986545b689002060c46e2b1582dd92a379f6e8d74e76660abe","sha512":"93c3171bcec4f345ba569b61c3a4bd88dfdeb1324ec0d88362812e73e13d1efd9a91bc4a564e7858700ba3a7c0abec958cfbf3838a81fb25c7099ea8cd2a526b","ssdeep":"1536:IqXZjEk8QQxLcbpr4aYDOMNsqldh/YliVS4ZFd:TXFENBcJO1NXOli8uFd","tlshash":"7343026ccfe5d4b3b02b1b5351ec825415ae161410ab295ecd728960bb9fe831b4cabe","first_seen":"2025-11-22T14:11:16.78742Z","last_seen":"2026-04-21T02:04:20.987286Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":829,"receive":625,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdfs658-d95692ss.1111532.com:21467/bewcdn.txt?t=1776737027194","fqdn":"sdfs658-d95692ss.1111532.com","domain":"1111532.com","tld":"com"},"ip":{"addr":"172.65.218.121","port":21467,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdfs658-d95692ss.1111532.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Wed, 21 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:75:A2:A0:55:50:50:95:58:5E:AA:7C:9A:A1:E6:C9:C3:4A:36:9E","sha256":"70:DC:8A:02:45:8A:84:B7:91:11:DC:42:30:A8:58:2D:CE:CE:15:AD:FE:BF:8A:09:B7:36:22:06:D2:C1:1A:0E"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737027194 HTTP/1.1\r\nHost: sdfs658-d95692ss.1111532.com:21467\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nx-oss-request-id: 69E6DB0434318D3333E0C7DC\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.26\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 2\r\nserver: gocache\r\nc-type: pf\r\nrid: 5cf3aa5d930feb9881aa483af4d1dc05\r\nx-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":1838,"timings":{"blocked":678,"dns":236,"connect":1,"send":0,"wait":479,"receive":1,"ssl":440},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"sdfs658-d95692ss.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-7zWzcy8H.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-7zWzcy8H.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: HrdjjnpO05dLTT52czz4uQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:47 GMT\r\netag: \"1EB7638E7A4ED3974B4D3E76733CF8B9\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 7697475570874862563\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB039B1BC9333897D69D\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 6079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6079,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6078)","md5":"1eb7638e7a4ed3974b4d3e76733cf8b9","sha1":"cffc718674e937b015fa0ee2617a6a6fe849d095","sha256":"39ebb07cc1552dfcabd9bad392125e5a2e94ec03d6d13ad963a07f6ec7a55ec0","sha512":"9ada0329260758ea6c8cfd8de03012445439d40c278bb4bd88447629bce6d9ce3273fd168245ddfe9c4242accf5ee7d8cca2d8b390f29264b8aae4a81267895c","ssdeep":"96:pxQhqP6uzjKHiqFtdzy+BmvRG9rdnVyNyY9CvZr4usHa+IEgbkSB1JYnSTdY7Ob/:pxiSG/++Bmv+rdoNyY0vZrz+5SPWn3C7","tlshash":"49c1ca8eb0a7643db397866855150001a31ceca6f02447a4adfd8b2d6be2e64c76770d","first_seen":"2026-03-21T10:33:31.201004Z","last_seen":"2026-04-21T02:06:10.081514Z","times_seen":460,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/arrow-down-CbZEo1md.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/arrow-down-CbZEo1md.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-7zWzcy8H.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwevw-156bv.wgkblhj508dev8989787ns78nf7568777wg.com/ipacdn.txt?t=1776737023194","fqdn":"wwwevw-156bv.wgkblhj508dev8989787ns78nf7568777wg.com","domain":"wgkblhj508dev8989787ns78nf7568777wg.com","tld":"com"},"ip":{"addr":"45.125.14.193","port":443,"asn":55933,"as":"Cloudie Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwevw-156bv.wgkblhj508dev8989787ns78nf7568777wg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 00:07:49 GMT","end":"Sat, 13 Jun 2026 00:07:48 GMT"},"fingerprint":{"sha1":"26:08:75:79:3C:62:53:F3:05:2E:40:EE:DE:19:D7:1E:F1:A7:90:C4","sha256":"51:18:35:6C:B8:A2:21:08:C0:A0:54:1B:69:ED:B0:3B:EC:9B:90:BC:FB:BA:F4:28:B0:93:EF:99:B9:A9:7D:7E"}}},"request":{"raw":"GET /ipacdn.txt?t=1776737023194 HTTP/1.1\r\nHost: wwwevw-156bv.wgkblhj508dev8989787ns78nf7568777wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\nset-cookie: acw_tc=0a0ccafb17767370241038196e4bc5444d71bced26378524a36a7a3b31a3fb;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS, Set-Cookie\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":1707,"timings":{"blocked":675,"dns":240,"connect":208,"send":0,"wait":352,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/assets/index-Dj7GhEA6.css","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/assets/index-Dj7GhEA6.css HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31622400\r\ncontent-encoding: gzip\r\ncontent-md5: kWXikZvHYSjjXKpJstHGuA==\r\ncontent-type: text/css\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 386800848803438409\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0236F3BB3639129108\r\nx-oss-server-time: 3\r\nx-oss-storage-class: Standard\r\ncontent-length: 814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3203)","md5":"9165e2919bc76128e35caa49b2d1c6b8","sha1":"06d3d5ab843d393016f6f81646cd5f8244032edb","sha256":"db6c6eede8a0fd0ff32ec122acd96a0e2126cb91808857282bc17114e9bcfdb6","sha512":"202619fb5a5207eea42185d022f84094bf5145fb2edd71b1e672a046e5668e6893f3770bded2f327a5de8ce1e4d6cb6e573c080d76eb610d2f38151dcfbca9cd","ssdeep":"","tlshash":"a261aa19e8e81074453bca467e8c9b101e1ef363f8938ec9a6c368474d6f56e34271eb","first_seen":"2026-03-21T10:33:31.199651Z","last_seen":"2026-04-21T02:06:10.098318Z","times_seen":460,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-ecosystem-DfQjWYvs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:41.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vue-ecosystem-DfQjWYvs.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 62OPEQZBkRcksxiOP+oqDw==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:42 GMT\r\netag: \"EB638F110641911724B3188E3FEA2A0F\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 14413526318470412197\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFE36F3BB3639337708\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 5327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5326)","md5":"eb638f110641911724b3188e3fea2a0f","sha1":"782dfe255472102506120fb73fb14d9e2e7ba075","sha256":"ff0ee7e1d3aa2e01adb457c13f318e1adc1a6dce3dda67868ca6c8b70afcf1bf","sha512":"7c24e185d6caf5d42aed6ca5dd1291c1a66b4938ae856e575d2d8615f7c735bde4fd47605e614c8451c2013668ac1ca93821691cf6a159067554245091081b77","ssdeep":"96:trJGxFiRKyxeF1NFjWtEtCEQxST3VPxt5L2kJOLUtNRCESkG6ToEuvSOpeFPTbQP:trYiRKD6tEtvQxST3bL2dUtNRRSkGCoX","tlshash":"25b1da9875937071733b4c99d07b010ab33839a4348ee4d0a42fafd53a619e293b3d9e","first_seen":"2026-03-21T10:33:31.202148Z","last_seen":"2026-04-21T02:06:10.054852Z","times_seen":473,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/agent/promote/binding/reportViewV2","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"OPTIONS /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-saas-server-id: 844988bcd4-6vbfs|e90ab7b334b5bb40407223acb616b0f4\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0ccaf817767370262165168e5d393c9628b7d18aafd365783a84e5f2ab5e;path=/;HttpOnly;Max-Age=1800\n__cf_bm=7mOGf7mbKAdPTAlPzlRSOrdB2CZWG0FVaSmbIIgplu4-1776737026.1247647-1.0.1.1-aZg9aV9yJaWhLNoxtRt1c9gVxEEdaYCB60GKz6uRJk2xf27dLUHYf4MTQWBUv82rv0yehwndL1tReLlgWvP8DfluSZ0xusqPSRtDkp8pfulJY7UXwLagktus.0PDqmsi; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:46 GMT\r\nserver: cloudflare\r\ncf-ray: 9ef8d06d4c4a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/crypto-BgUpi7_6.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:41.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/crypto-BgUpi7_6.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 2axu0LHSEbVmD1Ejub1QYA==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:42 GMT\r\netag: \"D9AC6ED0B1D211B5660F5123B9BD5060\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 13394495240657151044\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFE300C863837398565\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\ncontent-length: 19518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":19518,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19517)","md5":"d9ac6ed0b1d211b5660f5123b9bd5060","sha1":"c4850b0b3481dc33ff6d21c3f897a7da1d22be0b","sha256":"a90996ea5ecc94b9d190f36ec4af4f63bc1602a45f5e65677f0a3a164e18f9ec","sha512":"f0b1be567ce42bcf1a534870412630e818fd58a2173d139639dc693b9a9b9314068ae366cce998c453b8aeac9ad6f67903018d0e1c056b3d95059b5fa0a6f9e9","ssdeep":"384:zNgEnuTqRZ3uQAhR39AK6kEBxMZVhYLo3i2DT3GD:Rn6mdRAhXCqZVhYai2DT3GD","tlshash":"969273ceb9e9b580039334b8093fa01bf1a7246555adc564e3a8d5ecfdb809de127d38","first_seen":"2026-03-02T13:06:26.812304Z","last_seen":"2026-04-21T02:06:10.063844Z","times_seen":680,"resource_available":true,"data":null}},"time_used":1320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1319,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-core-BbiFjrsZ.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vue-core-BbiFjrsZ.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 010yxV76woa6COXDMjPAXg==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\netag: \"D35D32C55EFAC286BA08E5C33233C05E\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 14003466474443674754\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFF9B1BC933387DBF9D\r\nx-oss-server-time: 6\r\nx-oss-storage-class: Standard\r\ncontent-length: 74290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":74290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d35d32c55efac286ba08e5c33233c05e","sha1":"de06712cff5235d39a38d51cf3cac9f3cd75a042","sha256":"237fea871343d1a14189d135fcef684ecf12c154202590c08430a9f9623365b3","sha512":"5340121a1858fd7c876cbd67f5189fec795c62f133fb841e67b05cbfa1b2b6dd0cee216153b7597656fca42f5fdeab14c833109b4c08cf9e265c7dcfb8c562ae","ssdeep":"768:sJNHhYJGVFK8wMjUXn6pt6RDazH0RXTmU9GssBg27Oo66MdAMLu9lExfqe4amDqq:g7xjSmXv/h3r/iCkv5nrfS","tlshash":"847307e83192b46253fa19e2007b0406f379295a3849d9d8f26dfddb3e7240550bbebd","first_seen":"2026-03-21T10:33:31.214025Z","last_seen":"2026-04-21T02:06:10.07828Z","times_seen":473,"resource_available":true,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":859,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/hall/api/agent/downloadSite/getDownloadTemplate/tid/4530560.json?t=1776737","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:44.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /hall/api/agent/downloadSite/getDownloadTemplate/tid/4530560.json?t=1776737 HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: 3a2fb0f2-39f0-48db-8ca7-eb1100ebc462\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: 3a2fb0f2-39f0-48db-8ca7-eb1100ebc462\r\ntimestamp: 1776737024\r\nsiteCode: 1917\r\nsign: SMiEFITkQGsANHrB8Xf/xit4pbbApyStTVfqqt+bT8M644EJ/wSbtQ4v1eRSf6gS\r\ndevicetype: 4\r\nplatformtype: 3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=600,max-age=0,public\r\ncontent-encoding: gzip\r\ncontent-md5: Z0xVt7XGRyh2PXm7SVkp3g==\r\ncontent-type: application/json\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\nlast-modified: Mon, 20 Apr 2026 16:48:04 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 3099720433891823342\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0036F3BB36390C8608\r\nx-oss-server-time: 5\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10200,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (10200), with no line terminators","md5":"674c55b7b5c64728763d79bb495929de","sha1":"cb773679428c42ceaf752005978c593047feeb13","sha256":"a7894904f1bae7cb9ba6a3b226d04f168576377742923d954974d1ff3e65106e","sha512":"72dec0417769df3c8f60e054e9aaba1f2087867d93fd807d2041502036282114bcea0e8cf32b30294301c0974898efadfb5450d64e909c8b62d4e2ff86c2ab62","ssdeep":"192:ODY1m6M1H+zmxpOAaHut+HtkmynPTqQ8nTZqvH1OiL9HzZe9dNJ98EpHBFF:qY1mP0zmxY6YOmynPTd8nTZf0HzwlwGp","tlshash":"a822bf120a56ecafb3020f2648f8c82cccab5b6f251735a564e63caf616040bdd55793","first_seen":"2026-04-21T02:04:20.999011Z","last_seen":"2026-04-21T02:04:20.999011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ewq48-b16q.0066532.com/bewcdn.txt?t=1776737028508","fqdn":"ewq48-b16q.0066532.com","domain":"0066532.com","tld":"com"},"ip":{"addr":"104.18.17.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:48.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ewq48-b16q.0066532.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 14:49:17 GMT","end":"Sun, 05 Jul 2026 15:49:01 GMT"},"fingerprint":{"sha1":"3B:AA:84:FD:30:D7:CB:47:26:53:07:69:07:07:7A:2E:1C:FD:5A:54","sha256":"E3:C1:B2:71:CA:2B:A8:2E:B1:42:09:6E:69:C2:82:5C:6D:59:15:45:1F:64:5B:86:99:CC:FE:59:50:50:8F:5C"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737028508 HTTP/1.1\r\nHost: ewq48-b16q.0066532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\ncf-ray: 9ef8d07ceb5a56b1-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: s-maxage=31622400,max-age=0,public\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB04CD9B34333321F7E4\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=PC2Ve0AX6Y4MKao3uKxTstEic6Naihm8mZIvKb48JEk-1776737028.6222143-1.0.1.1-xGWcSpF8gYw6kfT2eRcvv1tALYh_IxsUJOZh6qXzmxNZhxXO2Qso5XVC2KjDDrNoGmQUYy6tWDnnuX2Ya3MOUvgoHqcOYdtAv.22W5Zs1UrrAzrUQbhc7BDLMg6l9Pf.; HttpOnly; Secure; Path=/; Domain=ewq48-b16q.0066532.com; Expires=Tue, 21 Apr 2026 02:33:48 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":85,"dns":66,"connect":1,"send":0,"wait":378,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ewq48-b16q.0066532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:33.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://www.zwems.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: ge_ua_p=87TULjanVGyrA2IToPZJeNTwyoW%2Bn96wtITpXlaoKDBa; Path=/; Expires=Tue, 21 Apr 2026 02:03:38 GMT; Max-Age=5\r\ncontent-length: 1962\r\ndate: Tue, 21 Apr 2026 02:03:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3227,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (991), with CRLF, LF line terminators","md5":"f33ed7291043680095ca4859da2b1c4f","sha1":"e8b11f104fb7cd59635dac016193aeec84a37cdb","sha256":"abc5f752b99634613a81457ca2444d24f031c790063d18f2c666f7cf3acb35af","sha512":"975247eb7ab7152c769d6bf312375a80717b5e8e637b7c677f23bd7997ae9f69166ddd74ae3d4fe67da9d23735d5636f6d51d129ff51931255ba0d9359a549ca","ssdeep":"","tlshash":"ea612b0d7202403682a380e16abbf77820607d41cce2c5226d56f077ffc9f93625b789","first_seen":"2026-04-21T02:04:21.002452Z","last_seen":"2026-04-21T02:04:21.002452Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-core-BbiFjrsZ.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:41.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vue-core-BbiFjrsZ.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 010yxV76woa6COXDMjPAXg==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:42 GMT\r\netag: \"D35D32C55EFAC286BA08E5C33233C05E\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 14003466474443674754\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFE27077C3431C9D9FF\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\ncontent-length: 74290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":74290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d35d32c55efac286ba08e5c33233c05e","sha1":"de06712cff5235d39a38d51cf3cac9f3cd75a042","sha256":"237fea871343d1a14189d135fcef684ecf12c154202590c08430a9f9623365b3","sha512":"5340121a1858fd7c876cbd67f5189fec795c62f133fb841e67b05cbfa1b2b6dd0cee216153b7597656fca42f5fdeab14c833109b4c08cf9e265c7dcfb8c562ae","ssdeep":"768:sJNHhYJGVFK8wMjUXn6pt6RDazH0RXTmU9GssBg27Oo66MdAMLu9lExfqe4amDqq:g7xjSmXv/h3r/iCkv5nrfS","tlshash":"847307e83192b46253fa19e2007b0406f379295a3849d9d8f26dfddb3e7240550bbebd","first_seen":"2026-03-21T10:33:31.214025Z","last_seen":"2026-04-21T02:06:10.07828Z","times_seen":473,"resource_available":true,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/utils-DP5omx3I.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:41.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/utils-DP5omx3I.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: txwaT9B0EtDd1fAAbkAedQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:42 GMT\r\netag: \"B71C1A4FD07412D0DDD5F0006E401E75\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 10442958121826919971\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFE300C863837308465\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 24038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24038,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24037)","md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-21T02:06:10.055827Z","times_seen":9192,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vue-ecosystem-DfQjWYvs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vue-ecosystem-DfQjWYvs.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 62OPEQZBkRcksxiOP+oqDw==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\netag: \"EB638F110641911724B3188E3FEA2A0F\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 14413526318470412197\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFF300C863837848D65\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\ncontent-length: 5327\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5327,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5326)","md5":"eb638f110641911724b3188e3fea2a0f","sha1":"782dfe255472102506120fb73fb14d9e2e7ba075","sha256":"ff0ee7e1d3aa2e01adb457c13f318e1adc1a6dce3dda67868ca6c8b70afcf1bf","sha512":"7c24e185d6caf5d42aed6ca5dd1291c1a66b4938ae856e575d2d8615f7c735bde4fd47605e614c8451c2013668ac1ca93821691cf6a159067554245091081b77","ssdeep":"96:trJGxFiRKyxeF1NFjWtEtCEQxST3VPxt5L2kJOLUtNRCESkG6ToEuvSOpeFPTbQP:trYiRKD6tEtvQxST3bL2dUtNRRSkGCoX","tlshash":"25b1da9875937071733b4c99d07b010ab33839a4348ee4d0a42fafd53a619e293b3d9e","first_seen":"2026-03-21T10:33:31.202148Z","last_seen":"2026-04-21T02:06:10.054852Z","times_seen":473,"resource_available":true,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0vdes56-532com.3344532.com/bewcdn.txt?t=1776737027193","fqdn":"www0vdes56-532com.3344532.com","domain":"3344532.com","tld":"com"},"ip":{"addr":"174.35.120.166","port":443,"asn":54994,"as":"ML-1432-54994","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.3344532.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Wed, 08 Apr 2026 00:00:00 GMT","end":"Tue, 07 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9E:71:0F:92:51:2B:70:4C:46:04:81:EA:16:41:B7:53:6A:EA:27:B7","sha256":"E5:EE:63:05:B3:61:FC:01:DB:D0:42:BC:5B:A3:A2:29:3A:A8:13:9E:C6:2F:D3:17:36:CE:CB:B4:75:41:B8:E6"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737027193 HTTP/1.1\r\nHost: www0vdes56-532com.3344532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E6DB03300C86393672A365\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\naccept-ranges: bytes\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.26\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 1\r\nvia: 1.1 ianxun21:19 (W), 1.1 PS-CDG-04A5e173:26 (W)\r\nx-px: ms PS-CDG-04A5e173CDG, ms ianxun21HKG(origin)\r\nx-ws-request-id: 69e6db03_PS-CDG-04A5e173_14227-4858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":247,"dns":127,"connect":27,"send":0,"wait":318,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwrs-b0e.wgkblhj508dev8989787ns78nf7568111wg.com/ipacdn.txt?t=1776737023195","fqdn":"wwwrs-b0e.wgkblhj508dev8989787ns78nf7568111wg.com","domain":"wgkblhj508dev8989787ns78nf7568111wg.com","tld":"com"},"ip":{"addr":"172.65.191.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwrs-b0e.wgkblhj508dev8989787ns78nf7568111wg.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Thu, 17 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:F9:E9:5D:39:E5:6F:FF:D8:F9:6E:7A:3D:1B:C4:36:8C:DB:A5:50","sha256":"08:F6:22:02:DA:BB:DA:A2:E5:F5:BB:A5:DA:77:42:F4:9F:43:85:81:B0:00:81:05:01:B8:08:DB:8F:47:45:C4"}}},"request":{"raw":"GET /ipacdn.txt?t=1776737023195 HTTP/1.1\r\nHost: wwwrs-b0e.wgkblhj508dev8989787ns78nf7568111wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 21 Apr 2026 02:03:43 GMT\r\nContent-Type: text/plain\r\nContent-Length: 2\r\nConnection: keep-alive\r\nSet-Cookie: acw_tc=0a094e7117767370239548585e3f9cf7aab0d37161ba077b4d125747d9daaf;path=/;HttpOnly;Max-Age=1800\r\nCache-Control: s-maxage=315360000,max-age=0,public\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 3600\r\nAccess-Control-Allow-Credentials: true\r\nServer: gocache\r\nc-Type: pf\r\nrid: e6693cb230a04d6b4e1f777247983b15\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GoCache","description":"GoCache is an in-memory key:value store/cache similar to memcached that is suitable for applications running on a single machine.","website":"https://www.gocache.com.br/","common_platform_enumeration":"","icon":"GoCache.png","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":1509,"timings":{"blocked":617,"dns":181,"connect":1,"send":0,"wait":271,"receive":0,"ssl":437},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/statistics/domain/pointer","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"OPTIONS /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:45 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-saas-server-id: 844988bcd4-pp87x|bf899aa43a93cc1a3f9de83ecfb115bf\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a094e7717767370252936207e2dff33963d523675607bc94e8becf02db206;path=/;HttpOnly;Max-Age=1800\n__cf_bm=9FTM5A8ujpnjblARJedYuBQV6anZ2Rf1HdeWy9awXRA-1776737025.2044673-1.0.1.1-i1lLua6nhluj7wlPBpYnvURr9j1ph3Bhx.qqqAh_mq_DZG1gvf7nzPbg5eq1D3KhFpm_8RPyKyjsYoP__Uu3iA.yhXmDPy4hE9l6c4uJ3OWu07RmVQPVvHvffHDZggSY; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:45 GMT\r\nserver: cloudflare\r\ncf-ray: 9ef8d0678f4f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"153.43.25.173/?languageCode=zh\u0026cid=6780513","fqdn":"153.43.25.173","domain":"153.43.25.173","tld":""},"ip":{"addr":"153.43.25.173","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:48.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"153.43.25.152","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 11 Feb 2026 08:53:29 GMT","end":"Mon, 15 Mar 2027 08:53:28 GMT"},"fingerprint":{"sha1":"DF:7C:93:80:94:2A:9C:46:E7:CF:45:59:C6:AF:81:1C:F8:FE:8E:F7","sha256":"6A:F1:97:28:24:34:DD:64:2C:A1:3C:9E:4C:E8:58:7F:56:76:A8:84:E0:D3:B1:E5:32:3C:7F:F1:A2:CB:C9:4F"}}},"request":{"raw":"GET /?languageCode=zh\u0026cid=6780513 HTTP/1.1\r\nHost: 153.43.25.173\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:49 GMT\r\ncontent-type: text/html\r\nserver: AliyunOSS\r\nx-oss-request-id: 69E6DB0525A0A13137A44176\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 21 Apr 2026 01:51:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7357002463452863871\r\nx-oss-storage-class: Standard\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-md5: LfkWWi3JwdVIYyTIfDQ6Vg==\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nvia: 1.1 PS-000-01ssR33:16 (W), 1.1 ianxun16:2 (W)\r\nx-px: ms ianxun16HKG, ms PS-000-01ssR33HKG(origin)\r\nx-ws-request-id: 69e6db05_ianxun16_19731-16133\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":334831,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"2df9165a2dc9c1d5486324c87c343a56","sha1":"bac1333648b0df219e385ede70057c03eb8ebed6","sha256":"873da5468058068fcfe115f34a77ffef12350bf4e3ccea406fdb645b6312e522","sha512":"aabc85f712c6d03a0d4ab2c054af1bb12634b3dbd28c37418e9bc7f579a596e23d0248810817129a0296d30f98ed9f5aca952091e70b38974277e3e864b07c64","ssdeep":"6144:PJoA9ha/wdnftVbJdF994XCRbj/lih3uJY:LUhf","tlshash":"d364ddc7aa9c1f82f57b31e4c053b1dd8b4494dd1b7089a87b7780abc36f4e09ac6562","first_seen":"2026-04-21T02:04:21.006311Z","last_seen":"2026-04-21T02:04:21.006311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":599,"dns":0,"connect":186,"send":0,"wait":210,"receive":0,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":80,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:32.623Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Length: 142\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"23edebff559f53c79b8312b442df80f4","sha1":"b1b1cecf27e9fa40f102f9a9b91b4b97cd578612","sha256":"3ab8a368aeb31e8f5373680ae08db47f9af5031723ddb9259c4255790020faa7","sha512":"85fc736fab755e4256b60f7d3b855b1ca6aa96a55a8934029d8d1ded7c97fa76c5f27a66c642bf8380c4f02ccc44f2b84bc4e17fb89b290ca6293376ced1535a","ssdeep":"","tlshash":"1ac02bce0c169b05845012c0c8d6f84cf01f83dc2040dd4030c3f032f880b5c4d0615c","first_seen":"2024-12-28T17:59:13.360415Z","last_seen":"2026-04-21T02:04:21.00817Z","times_seen":41,"resource_available":true,"data":null}},"time_used":1329,"timings":{"blocked":462,"dns":0,"connect":462,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-DRa6xXqm.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:40.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-DRa6xXqm.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: CckZ6Cs5qpbESfhgl8jp7g==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:40 GMT\r\netag: \"09C919E82B39AA96C449F86097C8E9EE\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 13825156717690467437\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFC36F3BB36397D6F08\r\nx-oss-server-time: 5\r\nx-oss-storage-class: Standard\r\ncontent-length: 122163\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":122163,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64376)","md5":"09c919e82b39aa96c449f86097c8e9ee","sha1":"a38f251275f0bbe823086d1bfaa9f18bfa9102ff","sha256":"af80330f0513536259722e3d1b18322d606aac99e8289a95add91b9019a6b3c3","sha512":"b56a791085c995de4bd0d0eaa8c0e8cc1ca7ecf1bb9749f35854d7b8da7dbeb5cfa444384a961aab8d9afbc4d260d7b7b80239f9c9f8160cd0eab3b1ad063b54","ssdeep":"1536:izNnbxfH1NaP0FnELL/t1oU1nvfc0tH6iimAsw8fUPpS022C:enbxf160Fn2H13cCaLSwEUPpDC","tlshash":"d3c36cdeb1a6613863e608ac617b1501b21d3d467546c4e0f5be8e653ba7c08f36bf2c","first_seen":"2026-03-21T10:33:31.228292Z","last_seen":"2026-04-21T02:06:10.082053Z","times_seen":461,"resource_available":true,"data":null}},"time_used":1319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":560,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/assets/index-CZ5pvmb6.css","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:40.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/assets/index-CZ5pvmb6.css HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31622400\r\ncontent-encoding: gzip\r\ncontent-md5: /DwAsDzlmwGXU7/f6ENgdg==\r\ncontent-type: text/css\r\ndate: Tue, 21 Apr 2026 02:03:40 GMT\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 15636024776468139085\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFC27077C343175D2FF\r\nx-oss-server-time: 4\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":36862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36861)","md5":"fc3c00b03ce59b019753bfdfe8436076","sha1":"58ec0c84e8653346d8cbe6f546434294c8ee9a5c","sha256":"af760cdeec3061f5a0efb03da6d00643c6848972565d3af91ac635fac7831259","sha512":"ea0deeeed1926784eaa7bad586772e39481eeb498bfc9fbeb6b440256503f7dc2656b830bf490a16dcd971ba676dae6dbdbb73e039843a149e07d8de19d3cb7e","ssdeep":"192:FwYdgt4FvfKxGOwArxE/pDpxInClCtAhYEkbxE5Mep4daAPj1fws2btOtrlZ+bRp:MtcWQ77lCtAmuvAF6hZ5hxm5piyKEap","tlshash":"13f2783bc45912189437ce71a7c82fa84214e563e5130fdeb99376074bcbbda35a129f","first_seen":"2026-03-21T10:33:31.206731Z","last_seen":"2026-04-21T02:06:10.087887Z","times_seen":473,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/utils-DP5omx3I.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/utils-DP5omx3I.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: txwaT9B0EtDd1fAAbkAedQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\netag: \"B71C1A4FD07412D0DDD5F0006E401E75\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 10442958121826919971\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFF36F3BB3639687F08\r\nx-oss-server-time: 3\r\nx-oss-storage-class: Standard\r\ncontent-length: 24038\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24038,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24037)","md5":"b71c1a4fd07412d0ddd5f0006e401e75","sha1":"a3cf730602aeef3df364916f4ef42e7c0f903419","sha256":"bc8e4ca06ec494e7df32f2dbf125b9b0503a60de5991b5badbb20e5e6c043ad7","sha512":"d018e92aeb4d98a54260edbd707e088a8875010278bc8979921cbbc492281e1fb8720ced7e21cc29b33500d4221c0c403b88b31b6f70caf069f2fc4daad2b793","ssdeep":"384:KLykXfExhSMH+rq/51Raw7t2v6az5CgSpnMjEMuSI162By4iBWijdv:KLFfY1erq/51YGt2/z5C3fSI162By4ib","tlshash":"f6b2a77fe3d5b73c07ece508d63504482f271f69ea88a0746e9892a1a9747c612c7f36","first_seen":"2025-06-19T04:15:59.5131Z","last_seen":"2026-04-21T02:06:10.055827Z","times_seen":9192,"resource_available":true,"data":null}},"time_used":1491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1174,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/agent/downloadSite/regionAccessV2","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"OPTIONS /hall/api/agent/downloadSite/regionAccessV2 HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nset-cookie: acw_tc=0a094e6617767370238405996e66adf6786dbb4088da0d7a99eb0e8c3ceb77;path=/;HttpOnly;Max-Age=1800\n__cf_bm=OPuv9V0Q5Y9iw4Ype67GyUtKUYxuzbDXV98CMNobcQA-1776737023.7443924-1.0.1.1-MxaRBLuean0b6d.Nhq9Wn.rGGxa.OOvSpUN7MIhYwqXyx0qeflIs3U3jKjsSB_i4adYhVN2dH8Ff4iwvF8S9o2PTwwC.vqNpMPwK6z6Z0PJeTx0X3StVgqVTB3x.y3Gl; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:43 GMT\r\nstrict-transport-security: max-age=15552000\r\nx-saas-server-id: 844988bcd4-5vkn7|f31cb99edad1bdc4ff9584328d8f6630\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: clienttimezone,content-type,device,devicemodel,devicetype,domain,language,nonce,platformtype,sign,sitecode,timestamp,x-custom-referer,x-request-id,x-version\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9ef8d05e6fd6b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/favicon.ico","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:44.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\ncache-control: no-cache\r\ncontent-md5: 78iLjPSGQ6l33ujr7lquPg==\r\ncontent-type: text/html\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\netag: \"EFC88B8CF48643A977DEE8EBEE5AAE3E\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, Status: 404\r\nx-oss-hash-crc64ecma: 12598442108753170511\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB00300C8638371C9465\r\nx-oss-server-time: 4\r\nx-oss-storage-class: Standard\r\ncontent-length: 310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":310,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"efc88b8cf48643a977dee8ebee5aae3e","sha1":"50b89d535d399493558d0bde1b3225c80548eb2d","sha256":"68f62426c319126501255a6007a3eafcbe6d6b1cd1cfbff9356a7f074ec69feb","sha512":"a1a87517d23d55ac01901a3e09b67bfae830c429739faee843c00151a66ad96e31b831402de959a664aa403e90e88258db641d3dbfefc066f2bde9f80839df53","ssdeep":"","tlshash":"63e0c2c384f2940da155426109e1f2081aca95eb5b47984e3dcda7289f8ab4dc9d798c","first_seen":"2024-12-11T10:09:32.928381Z","last_seen":"2026-04-21T02:06:10.092309Z","times_seen":14287,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":428,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/arrow-down-CbZEo1md.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/arrow-down-CbZEo1md.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 7IhammG8n/sAdc4gHx/ZGQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:47 GMT\r\netag: \"EC885A9A61BC9FFB0075CE201F1FD919\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 11258959773668813228\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB03300C86383786A065\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\ncontent-length: 415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":415,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (414)","md5":"ec885a9a61bc9ffb0075ce201f1fd919","sha1":"c6867e239bea13137249f88d4df54257388e7206","sha256":"6b1b6e2af57f966ba2a9bf5968b89955c786aeff85f0094c701149cf85429ade","sha512":"d2114fcf440113d379275dcfb2e4f7ee768d12315f6165813492ec9cebcf895039c1c5a7eedfcbf4e89c2bf9cae04cc673932da7184a0e4338c9feebde86cd73","ssdeep":"","tlshash":"f8e0abbe56e551fd0907c86c0860584a872eb1fe36ad4895b28d96f1c013423a9034a5","first_seen":"2026-03-21T10:33:31.230669Z","last_seen":"2026-04-21T02:06:10.071458Z","times_seen":460,"resource_available":true,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/cocos/config_data.json?t=1776737","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /cocos/config_data.json?t=1776737 HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncontent-md5: jd61t/kynipat8KD0KBFcw==\r\ncontent-type: application/json\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\nlast-modified: Thu, 16 Apr 2026 14:40:12 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 6248268871902589071\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB02300C863837429F65\r\nx-oss-server-time: 1\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6592,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (6592), with no line terminators","md5":"8ddeb5b7f9329e2a5ab7c283d0a04573","sha1":"cbf0ba6810399ca2ffb9932e1cd17a2cfff42b06","sha256":"872f92da78a4a6ee2ad3daf40bcaeaaab59bdc16f80a0356e62622165fe91b8d","sha512":"d4931692aacb1341fb4a250d5799ee5a93200e6a684023425b4d4be6240100d527b4452e33586f63e36cb847599cbd29b0c71808d53aa4aef8f3d592a08e04d9","ssdeep":"192:TXmyYGnIUhAZruFU3B/foF34867HIqqz/l:TXPnIUhAh/Ri3lrl","tlshash":"3cd1ae6766494651d0d0df13edc9abbb83df4b8060573ac8d82929ecb8431a59b1c8d2","first_seen":"2026-04-21T02:04:21.012851Z","last_seen":"2026-04-21T02:04:21.012851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1057,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1057,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/siteadmin/upload/img/1939972079374462977.avif","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /siteadmin/upload/img/1939972079374462977.avif HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:28.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":6990,"timings":{"blocked":3494,"dns":2774,"connect":316,"send":0,"wait":0,"receive":0,"ssl":402},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.zwems.cc/","date":"2026-04-21T02:03:34.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nX-GE-UA-Step: prev\r\nContent-Length: 23\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/\r\nCookie: ge_ua_p=87TULjanVGyrA2IToPZJeNTwyoW%2Bn96wtITpXlaoKDBa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"sum=21617706\u0026nonce=5464"}},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ; Path=/; Domain=zwems.cc; Expires=Wed, 22 Apr 2026 02:03:34 GMT; Max-Age=86400\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 12\r\ndate: Tue, 21 Apr 2026 02:03:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"fb50bf98d7d4137b4b4604ae138bc57c","sha1":"9463df0cbfa20eb19a5b7d1fa0b99cf9a0cbf56f","sha256":"6bc0da1f42f96fc37b8bd7ed20ba57606d2a0da5cda2b135c7854fbdc985b8a3","sha512":"2542cb2f0ea107d99cc508b0ff285a62abecce6c8d60ade65003605eadd30a3389926de638b4e895cfd46756be769ba125e60a4c2f51707d1bf18e61dde4b612","ssdeep":"","tlshash":"f8600003000c0030003000000300f0300033c0000000003c0003f000030033c0000c00","first_seen":"2023-04-10T06:46:58Z","last_seen":"2026-04-21T02:04:21.014363Z","times_seen":971,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"146.103.72.162/ipacdn.txt?t=1776737023195","fqdn":"146.103.72.162","domain":"146.103.72.162","tld":""},"ip":{"addr":"146.103.72.162","port":443,"asn":0,"as":"","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"146.103.72.152","organization":"TXNetworks Beijing Co., Ltd."},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 04 Sep 2025 09:01:10 GMT","end":"Tue, 06 Oct 2026 09:01:09 GMT"},"fingerprint":{"sha1":"28:A8:2C:86:99:70:3A:7B:F9:7F:6A:37:9E:67:40:48:11:FF:00:E2","sha256":"67:F0:EE:E9:A5:F2:49:4F:B0:EE:AC:13:4F:F2:79:CD:7B:F2:D4:71:84:80:E9:4C:4D:42:14:06:F1:F8:6B:C1"}}},"request":{"raw":"GET /ipacdn.txt?t=1776737023195 HTTP/1.1\r\nHost: 146.103.72.162\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nset-cookie: acw_tc=0a094e7617767370240596375e3f950e5a5c41e5cd39b5cde66a0bade5b374;path=/;HttpOnly;Max-Age=1800\r\ncache-control: s-maxage=315360000,max-age=0,public\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-credentials: true\r\nvia: 1.1 PS-SIN-047qh52:12 (W), 1.1 PS-SIN-04Xkl20:32 (W)\r\nx-px: ms PS-SIN-04Xkl20SIN, ms PS-SIN-047qh52SIN(origin)\r\nx-ws-request-id: 69e6db00_PS-SIN-04Xkl20_47759-8982\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":1779,"timings":{"blocked":749,"dns":0,"connect":250,"send":0,"wait":276,"receive":0,"ssl":500},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-QzRG_IaZ.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-QzRG_IaZ.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.1111532.com/bewcdn.txt?t=1776737028507","fqdn":"www.1111532.com","domain":"1111532.com","tld":"com"},"ip":{"addr":"104.18.30.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:48.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.1111532.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 15:22:28 GMT","end":"Sun, 05 Jul 2026 16:22:03 GMT"},"fingerprint":{"sha1":"F2:E9:20:32:F3:BC:62:4C:8E:B7:38:04:22:26:B1:4E:99:96:52:2B","sha256":"44:A0:C2:00:EC:96:67:EA:A5:62:21:30:C9:7B:C3:B2:17:EB:F7:43:E1:9D:AA:EE:B6:1E:4A:9B:1E:C3:87:C4"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737028507 HTTP/1.1\r\nHost: www.1111532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:48 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\ncf-ray: 9ef8d07d1bb35ebd-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: s-maxage=31622400,max-age=0,public\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB042E3907393355FC1E\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=Uo0oUoIGLIHxvD9xNOP4U6BZRRIxBkak5U2CII5sJ5Q-1776737028.6572285-1.0.1.1-qfA7kwojkUuEDxT.1pgtNbm9HydlGpN5H4Qh8CtX8vbBcVY2d3zHJYLrtkE8n8Erjy68VYfFnGmcS9He7r7ayNXXQsMzWwpkpY81_H_znBidFALFdx7z240oI5AgW1OV; HttpOnly; Secure; Path=/; Domain=www.1111532.com; Expires=Tue, 21 Apr 2026 02:33:48 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":121,"dns":111,"connect":1,"send":0,"wait":335,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.1111532.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/favicon.ico","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zwems.cc/","date":"2026-04-21T02:03:34.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/\r\nCookie: ge_ua_p=87TULjanVGyrA2IToPZJeNTwyoW%2Bn96wtITpXlaoKDBa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\ncache-control: no-cache\r\ncontent-md5: 78iLjPSGQ6l33ujr7lquPg==\r\ncontent-type: text/html\r\ndate: Tue, 21 Apr 2026 02:03:34 GMT\r\netag: \"EFC88B8CF48643A977DEE8EBEE5AAE3E\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, Status: 404\r\nx-oss-hash-crc64ecma: 12598442108753170511\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAF69B1BC93338548B9D\r\nx-oss-server-time: 4\r\nx-oss-storage-class: Standard\r\ncontent-length: 310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":310,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"efc88b8cf48643a977dee8ebee5aae3e","sha1":"50b89d535d399493558d0bde1b3225c80548eb2d","sha256":"68f62426c319126501255a6007a3eafcbe6d6b1cd1cfbff9356a7f074ec69feb","sha512":"a1a87517d23d55ac01901a3e09b67bfae830c429739faee843c00151a66ad96e31b831402de959a664aa403e90e88258db641d3dbfefc066f2bde9f80839df53","ssdeep":"","tlshash":"63e0c2c384f2940da155426109e1f2081aca95eb5b47984e3dcda7289f8ab4dc9d798c","first_seen":"2024-12-11T10:09:32.928381Z","last_seen":"2026-04-21T02:06:10.092309Z","times_seen":14287,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vant-DoiDA9Rs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:41.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vant-DoiDA9Rs.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 4IMdketgTcOL8Ct/d1h0sg==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:42 GMT\r\netag: \"E0831D91EB604DC38BF02B7F775874B2\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 9834811770680785235\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFE9B1BC933381CB89D\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 29462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":29462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29173)","md5":"e0831d91eb604dc38bf02b7f775874b2","sha1":"4998ca3f37992f9877ada4d981891d237951b356","sha256":"1a7b5ffded39ce7f50776e984fffb8ee389fc001b33f0b291ccbf5146e601583","sha512":"cb8140860715d26a6f6e8dec72492020f99f2cd80e55189bb5ccc59521f742cee47ec185991b698b0bb2a1ad4a627b096d719768b016a09f6d2b66f3f34a384e","ssdeep":"768:woxNnhadZoeRwG5fccpM0+/uQOt8kGxrME8Eu2Oada3x70Xan9EFf97h6NGXIUxo:ioMnM0+Y8T9+J","tlshash":"dcd21ad43046b43b53f686ea40290345b3292ba5340ac4ecb13ceddbb665c16b5bbf79","first_seen":"2026-03-21T10:33:31.197376Z","last_seen":"2026-04-21T02:06:10.088381Z","times_seen":473,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1154,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/vant-DoiDA9Rs.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/vant-DoiDA9Rs.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 4IMdketgTcOL8Ct/d1h0sg==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\netag: \"E0831D91EB604DC38BF02B7F775874B2\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 9834811770680785235\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFF36F3BB3639E47F08\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 29462\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":29462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29173)","md5":"e0831d91eb604dc38bf02b7f775874b2","sha1":"4998ca3f37992f9877ada4d981891d237951b356","sha256":"1a7b5ffded39ce7f50776e984fffb8ee389fc001b33f0b291ccbf5146e601583","sha512":"cb8140860715d26a6f6e8dec72492020f99f2cd80e55189bb5ccc59521f742cee47ec185991b698b0bb2a1ad4a627b096d719768b016a09f6d2b66f3f34a384e","ssdeep":"768:woxNnhadZoeRwG5fccpM0+/uQOt8kGxrME8Eu2Oada3x70Xan9EFf97h6NGXIUxo:ioMnM0+Y8T9+J","tlshash":"dcd21ad43046b43b53f686ea40290345b3292ba5340ac4ecb13ceddbb665c16b5bbf79","first_seen":"2026-03-21T10:33:31.197376Z","last_seen":"2026-04-21T02:06:10.088381Z","times_seen":473,"resource_available":true,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1491,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/hall/api/lobby/channel/go/getChannelInfoById/id/6780513/info/channel.json?t=1776737","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /hall/api/lobby/channel/go/getChannelInfoById/id/6780513/info/channel.json?t=1776737 HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: ef8413d4-2a3d-4076-88f9-cdea28d07e0c\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: ef8413d4-2a3d-4076-88f9-cdea28d07e0c\r\ntimestamp: 1776737023\r\nsiteCode: 1917\r\nsign: IDx0rwBJFiCJ4edR8MV+BscHI5pQtwc2VjLJO4xaP7Wyy5CjV3Hn9ZCZJWXZ2T79\r\ndevicetype: 4\r\nplatformtype: 3\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-encoding: gzip\r\ncontent-md5: pyXa9O4UJTzNrGOgIBxrHA==\r\ncontent-type: application/json\r\ndate: Tue, 21 Apr 2026 02:03:44 GMT\r\nlast-modified: Tue, 14 Apr 2026 19:09:33 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 15369203787445736124\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0036F3BB36392D8108\r\nx-oss-server-time: 6\r\nx-oss-storage-class: Standard\r\ncontent-length: 1121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1388,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (1388), with no line terminators","md5":"a725daf4ee14253ccdac63a0201c6b1c","sha1":"4fd7e49ea386d9119f0f9fcb738d23640ff7738a","sha256":"f789e9184b7643a369eccdbfd7bec19b5e2bfc484b5a8eede42f700c649fb669","sha512":"45c85a352a70a4e64c6620839aea7d3cc432711d3d72eb05fbde0ef95b66fad942ae7a3d8baf8a968a9e3f19b71a0db4856e4ed80bc82a1f33ad1bbce4098516","ssdeep":"","tlshash":"ba21eb035ee9fe285c201824ab17453f63a3199f9f2527425b30d350675b60863d601c","first_seen":"2026-04-21T02:04:21.015731Z","last_seen":"2026-04-21T02:04:21.015731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/zh-DH7itq7n.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/zh-DH7itq7n.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/js/index-DRa6xXqm.js\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: WbrKHvvfZ37Ds7lLvaq4nA==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:45 GMT\r\netag: \"59BACA1EFBDF677EC3B3B94BBDAAB89C\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 15398038891774322525\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0136F3BB3639938908\r\nx-oss-server-time: 5\r\nx-oss-storage-class: Standard\r\ncontent-length: 8504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8504,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5275)","md5":"59baca1efbdf677ec3b3b94bbdaab89c","sha1":"563e7c8b352946ba19f71591c15c418893c4e8a4","sha256":"a00bb24989f0c16dbc866c683b214031ba6b7119ba6d6b367e26ffc798dcba91","sha512":"e2aef417bf9efb9b9cf4594356224aedabae7f601d7f39795837e5e2d82048ac6cee93802c0e856df6dee71933354c989894d49399bb4c4be1a41723d63d6cc6","ssdeep":"192:O3FyGn/aZJd4+Ms2QmPblTe+j1iU7hQbHyuej5Ov+H:onQcfxDk+piUMyuejAv+H","tlshash":"7702e9d507ec9ef8464a02d96f1b4884b1552da7e6e6c9e41fa688f5304db0f130319b","first_seen":"2026-03-21T10:33:31.223435Z","last_seen":"2026-04-21T02:06:10.089646Z","times_seen":410,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/assets/vant-DJOnW2S3.css","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/assets/vant-DJOnW2S3.css HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31622400\r\ncontent-encoding: gzip\r\ncontent-md5: hGLpeNy3oTOMMuVxP1I4/Q==\r\ncontent-type: text/css\r\ndate: Tue, 21 Apr 2026 02:03:40 GMT\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 17944980485908575814\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFC300C863837CB7D65\r\nx-oss-server-time: 3\r\nx-oss-storage-class: Standard\r\ncontent-length: 2504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12595,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12594)","md5":"8462e978dcb7a1338c32e5713f5238fd","sha1":"c729ead6412c6e2170d8ebbb88266b47c9a26823","sha256":"e3d1127793c738345cec2f02d7c4f9aa268505ab2d4527e9b77f75bb2f840bd3","sha512":"fcc34c90f6434bcc64a1641d102ab82e0a4fbe541b841813e0938663e49aa2ccfa26474dd9b520d38ee22b543ad25d5b56e758c6c1274cd7ce5b6dd7b44dce84","ssdeep":"384:MD2KFZnHEcam51bjQurwcq6SWHd/flrwcq6SWHd/fyfzQWmhqIX:5fXmhqIX","tlshash":"5742412ae841027a6e036a2597de05d4f17ce6b27e62cde8715432498bc7ff81737247","first_seen":"2025-08-21T07:31:55.601088Z","last_seen":"2026-04-21T02:06:10.054128Z","times_seen":6810,"resource_available":false,"data":null}},"time_used":1316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1314,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/crypto-BgUpi7_6.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/crypto-BgUpi7_6.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 2axu0LHSEbVmD1Ejub1QYA==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:43 GMT\r\netag: \"D9AC6ED0B1D211B5660F5123B9BD5060\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 13394495240657151044\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFF27077C343128E1FF\r\nx-oss-server-time: 4\r\nx-oss-storage-class: Standard\r\ncontent-length: 19518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":19518,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19517)","md5":"d9ac6ed0b1d211b5660f5123b9bd5060","sha1":"c4850b0b3481dc33ff6d21c3f897a7da1d22be0b","sha256":"a90996ea5ecc94b9d190f36ec4af4f63bc1602a45f5e65677f0a3a164e18f9ec","sha512":"f0b1be567ce42bcf1a534870412630e818fd58a2173d139639dc693b9a9b9314068ae366cce998c453b8aeac9ad6f67903018d0e1c056b3d95059b5fa0a6f9e9","ssdeep":"384:zNgEnuTqRZ3uQAhR39AK6kEBxMZVhYLo3i2DT3GD:Rn6mdRAhXCqZVhYai2DT3GD","tlshash":"969273ceb9e9b580039334b8093fa01bf1a7246555adc564e3a8d5ecfdb809de127d38","first_seen":"2026-03-02T13:06:26.812304Z","last_seen":"2026-04-21T02:06:10.063844Z","times_seen":680,"resource_available":true,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":857,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0vr-swe.wgkblhj508dev8989787ns78nf7568222wg.com/ipacdn.txt?t=1776737023195","fqdn":"www0vr-swe.wgkblhj508dev8989787ns78nf7568222wg.com","domain":"wgkblhj508dev8989787ns78nf7568222wg.com","tld":"com"},"ip":{"addr":"134.122.135.148","port":443,"asn":152194,"as":"CTG Server Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:43.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0vr-swe.wgkblhj508dev8989787ns78nf7568222wg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 23:27:22 GMT","end":"Fri, 12 Jun 2026 23:27:21 GMT"},"fingerprint":{"sha1":"36:F5:C5:1E:C9:0E:AC:F4:86:F4:C6:DD:8B:EE:62:3D:EA:F8:4F:05","sha256":"21:6F:BA:90:D1:83:71:7D:2C:EF:56:E0:0B:B8:98:94:D7:A9:C4:9B:1F:E3:58:D1:8F:98:7E:2F:CA:12:9C:2C"}}},"request":{"raw":"GET /ipacdn.txt?t=1776737023195 HTTP/1.1\r\nHost: www0vr-swe.wgkblhj508dev8989787ns78nf7568222wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\ncache-control: s-maxage=315360000,max-age=0,public\r\ncontent-type: text/plain\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\nset-cookie: acw_tc=0a0ccafd17767370266956315e4ff6e2f6e601d4bce826d78fa13a36885f04;path=/;HttpOnly;Max-Age=1800\r\nstrict-transport-security: max-age=31536000\r\nx-cache: BYPASS, Set-Cookie\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":4429,"timings":{"blocked":756,"dns":236,"connect":255,"send":0,"wait":2911,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/statistics/domain/pointer","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"POST /hall/api/statistics/domain/pointer HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: f0746b0f-1dab-4dec-8b2f-97a08140f46e\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: f0746b0f-1dab-4dec-8b2f-97a08140f46e\r\ntimestamp: 1776737025\r\nsiteCode: 1917\r\nsign: pPSsc9oq/AHUoeVk2baIbN8WnPiujtB3wNxt8VgwzToPjOCTiBu77rqIWFRnvRfr\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 78\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":78,"data":"{\"domain\":\"www.zwems.cc\",\"deviceKind\":3,\"visitsKind\":1,\"kind\":9,\"cid\":6780513}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-trace-id: 3610800b6ff9c93a776f2c23e55d5392\r\nx-env-go-biz-statistics-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-wkvbg|d708f4ff8f4aadad4a4041270ae4da59\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0f6b8917767370254894824e348cded3c2cd8aa90ce5c4b963f22e7a0e00;path=/;HttpOnly;Max-Age=1800\n__cf_bm=eBqAwNIX_cjFekoByAh_TKQAzI8KReaIwNAu89JMe2I-1776737025.3970525-1.0.1.1-xfyZW16xFCRVmZzfPzyt9IrPTDf9j_2HApBXfgF8HEIdvQYAKjt_l6UoGlZpj3cR2oEUI0TkB1a65ewTe14ucl_Zb0shQ.ZtZeWcbRlV7Uyasyghpwv.kEai_7CatiSK; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:45 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ef8d068b84f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d37e64b54f0a85877ea1f10ea0e2b674","sha1":"d3fd1c9a8c0ebe55848b05eed75f8b99bd835c4f","sha256":"1cc087203383d35fac721718fa96455c454c264cc9419237b8fe750ad97e4409","sha512":"c27e410a25e2ac525dd6d1c691588c89ad280bc74bef45ecb193ecaf88dddb63ee793207a8e3dbd1cc772ddb688d0647576944dfc94cbed9af7a2da19c0ecfae","ssdeep":"","tlshash":"b4900291831d86425485627961099585611854568855c31c8e5d0d6408a80961001199","first_seen":"2026-04-21T02:04:21.026465Z","last_seen":"2026-04-21T02:04:21.026465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-D_vizf3_.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-D_vizf3_.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: lNNWVWG7x+83ka/w4Lgm7w==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\netag: \"94D3565561BBC7EF3791AFF0E0B826EF\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 5094972406357050108\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB02300C863837729D65\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 6529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6529,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6065)","md5":"94d3565561bbc7ef3791aff0e0b826ef","sha1":"3973c0f02c14daebda78fea2ce20822f1baf3894","sha256":"32f4f448da90fb42b6dc34badaa69f6b8c24118880a803ac3f25a2c48290e595","sha512":"dec1429541265158e4cfd79777ebee4778d777568f781bb0a067b993870381478c7a09d9ac2735e551846c54880911f91176b36037f697c3f67b1c242e9eaac3","ssdeep":"192:44ESLwe2cR+NQq6SkK7ZWVFR6EsAS/Ois:3R8eDKYI53e","tlshash":"41d1a60dfc191db5d37248c8f685025811256b5296bcc2b1f6fe5ba81ee0c609faf8bd","first_seen":"2026-03-21T10:33:31.219101Z","last_seen":"2026-04-21T02:06:10.076061Z","times_seen":455,"resource_available":true,"data":null}},"time_used":1421,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com/hall/api/agent/promote/binding/reportViewV2","fqdn":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","domain":"wgbdg508de888v796ns78nf7888999wg.com","tld":"com"},"ip":{"addr":"104.18.16.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 09:18:01 GMT","end":"Sat, 27 Jun 2026 10:17:54 GMT"},"fingerprint":{"sha1":"4B:DD:79:65:CC:8E:54:4D:7C:E9:4C:6A:46:C0:21:9C:D3:9D:16:2E","sha256":"5F:F1:F5:34:DB:0C:6E:92:72:2F:09:4D:89:27:80:05:D7:61:1B:F2:8E:26:CD:63:30:EE:1A:E6:D2:66:A0:08"}}},"request":{"raw":"POST /hall/api/agent/promote/binding/reportViewV2 HTTP/1.1\r\nHost: www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en;q=0.9, *;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nlanguage: en\r\ndevice: f102399806a12bb2a4b23f8cec0f2366\r\nx-version: 7.1.30\r\nX-Request-Id: bbf7241a-519f-45c3-8f9f-5fc8310222ca\r\nX-Custom-Referer: https://www.zwems.cc/normal/?cid=6780513\r\ndomain: www.zwems.cc\r\nclienttimezone: UTC0\r\ndeviceModel: undefined-undefined\r\nnonce: bbf7241a-519f-45c3-8f9f-5fc8310222ca\r\ntimestamp: 1776737026\r\nsiteCode: 1917\r\nsign: BPb7tjlTnNdIypvsT/MzfWZCFPKHbh/MUcvuKSgxgcaF3skFBYiHNHd4VdRBnG3c\r\ndevicetype: 4\r\nplatformtype: 3\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"channel_info\":\"6780513\",\"visitor_device\":\"f102399806a12bb2a4b23f8cec0f2366\",\"accessUrl\":\"https://www.zwems.cc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=15552000\r\nx-trace-id: ef5e7c43bd15adc1c727947177f5751e\r\nx-env-go-biz-agent-server: 0\r\ncache-control: no-cache\r\nx-saas-server-id: 844988bcd4-dcnw6|fb3b8e62eab353edec8e519a258a9318\r\naccess-control-allow-methods: *\r\naccess-control-max-age: 1728000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Trace-ID, newjwt, token\r\ncf-cache-status: DYNAMIC\r\nset-cookie: acw_tc=0a0ccaf017767370264085612e439e2c3a97a2251ec780e351814d64d44663;path=/;HttpOnly;Max-Age=1800\n__cf_bm=1_gM9UIKGeSSwGTeKPdZHRKh0wwmTLkUOvOaXOWrYkY-1776737026.3169274-1.0.1.1-udptliX7toN5nL.29EZok8ciHlBYoFpaxjrWU6YhMpXUeDydFL05.eLeHMqvDZ_is82Ndib37TA0gRXbB5J8KXl4PYnaW7k4arIYdpGwUzBOuC7cYFLGi0lBTXh95VZ2; HttpOnly; Secure; Path=/; Domain=www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com; Expires=Tue, 21 Apr 2026 02:33:46 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ef8d06e7d570daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"46fb82d8f3bd01f4c39e3b5b57fb5cc6","sha1":"d53cb72bde71555e1007799077a5d0d6cbef6911","sha256":"4012b791282cbcee67ff109364a16ae657200242087f137cd0957749a134da8d","sha512":"44694bbefdb7133d3a0dedd800a9e1c9dffb1f55d7fd30378bbbf6cc54cbd6fecb937372650b19af1567d2cf97ec9f64e3243fd59848f608c66bb94249c01074","ssdeep":"","tlshash":"48b01291532ccb0354656366510e55c1d79e25458c388328de4ead2cc89e07722000f8","first_seen":"2026-04-21T02:04:21.029059Z","last_seen":"2026-04-21T02:04:21.029059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www0e65wb5r.wgbdg508de888v796ns78nf7888999wg.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/assets/index-CRpQkerk.css","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/assets/index-CRpQkerk.css HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-DRa6xXqm.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-DRa6xXqm.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/polyfills-BkzohEkc.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:40.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/polyfills-BkzohEkc.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: 4x5K+1O0etk/H5TFhQj/LQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:40 GMT\r\netag: \"E31E4AFB53B47AD93F1F94C58508FF2D\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 9779315239686224878\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFC9B1BC93338B4AF9D\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 6749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6749,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6748)","md5":"e31e4afb53b47ad93f1f94c58508ff2d","sha1":"ed0a05ae7e3a1c71b9c771144279a3e67c1971d9","sha256":"7d8df769625fe98395cff2056f13f2433e0249d8e0964562518456cf48b938bf","sha512":"f2d00e0a56715d072d7017bae61687fcd283ab57807621197a3ba3df4b75acffe0e442e93ee8cb174d305811e9ed69b1ee7d6848001ff7fcd4152b530b95b9ee","ssdeep":"96:cLy4jWt/WSSCpNw0Y9mnpYf6SXl6hQvXzEY8iWu0VdX1vSjvguDdrwaH:h4jE2CpN8v1Xl6Cvqu0bgj4u7","tlshash":"99d186e87291b07042a7a2b6d02f1507f239b97252edd0d0d365ecf0acb949d4277f29","first_seen":"2026-02-06T16:41:27.155404Z","last_seen":"2026-04-21T02:06:10.070375Z","times_seen":1353,"resource_available":true,"data":null}},"time_used":1318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":626,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:39.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.zwems.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.zwems.cc/normal/?cid=6780513\r\ncontent-length: 0\r\ndate: Tue, 21 Apr 2026 02:03:39 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":null,"data":{"size":24796,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/?cid=6780513","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:03:39.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/?cid=6780513 HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://www.zwems.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ge_ua_key=87fULjanVGyrA2IToPZJeH7nrGhayfbt8ARj3JFh%2FIKJ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: s-maxage=600,public,max-age=0\r\ncontent-encoding: gzip\r\ncontent-md5: ThbOnulhDqV0HnveTUWFhQ==\r\ncontent-type: text/html\r\ndate: Tue, 21 Apr 2026 02:03:40 GMT\r\nlast-modified: Tue, 21 Apr 2026 01:51:30 GMT\r\nserver: AliyunOSS\r\nvary: Accept-Encoding, Origin\r\nx-cache: BYPASS\r\nx-oss-hash-crc64ecma: 9898079321114505383\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DAFC9B1BC933386FAB9D\r\nx-oss-server-time: 4\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":24796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (24796), with no line terminators","md5":"4e16ce9ee9610ea5741e7bde4d458585","sha1":"45b32e94007896d32bff3b24061385af33dff4bb","sha256":"5d693778b87643886d10b56ede56f7c562174038c4f9533d0974d7b189826017","sha512":"dcd2e7a6bd90ec9a5e405e51bc07b08e2d5d08aadaa85418bbab79612e3958e52ace1f50f0c139b29aaf32aa60737b8d7d2ecc30fdd4f046a656155874eabb55","ssdeep":"384:O0ALdz1hTXx2IGXyAk+r0U4YQdtmHaBGuGvh8oreqqS9i8mnGzekNCs:Ohdz1JB2OAfQU4LXmHGUePqwDnQQs","tlshash":"3ab2f9c7768c6f52f27a32e8d161f1cc2a0059c826748595337b80dbc79e5f0aa9f1b9","first_seen":"2026-04-21T02:04:21.031967Z","last_seen":"2026-04-21T02:04:21.031967Z","times_seen":1,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zwems.cc/normal/js/index-7zWzcy8H.js","fqdn":"www.zwems.cc","domain":"zwems.cc","tld":"cc"},"ip":{"addr":"35.77.22.106","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:46.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zwems.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 17:14:01 GMT","end":"Fri, 17 Jul 2026 17:14:00 GMT"},"fingerprint":{"sha1":"FD:1A:B8:54:97:2A:F5:AB:86:DB:8C:FE:53:C7:41:DB:EB:05:A3:A1","sha256":"65:08:3E:3F:D2:D2:4A:AB:6E:9B:B3:0C:52:FA:84:63:49:E3:B0:74:E3:61:F3:43:5D:54:BF:D8:51:F1:C9:85"}}},"request":{"raw":"GET /normal/js/index-7zWzcy8H.js HTTP/1.1\r\nHost: www.zwems.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/normal/?cid=6780513\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: max-age=31622400\r\ncontent-md5: HrdjjnpO05dLTT52czz4uQ==\r\ncontent-type: text/javascript\r\ndate: Tue, 21 Apr 2026 02:03:46 GMT\r\netag: \"1EB7638E7A4ED3974B4D3E76733CF8B9\"\r\nlast-modified: Sat, 21 Mar 2026 10:00:21 GMT\r\nserver: AliyunOSS\r\nvary: Origin\r\nx-cache: BYPASS, write file cache failed: over disk size, current: 11674865664, capacity: 10737418240\r\nx-oss-hash-crc64ecma: 7697475570874862563\r\nx-oss-meta-version: v7.1.30\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB029B1BC933382CD39D\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\ncontent-length: 6079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6079,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (6078)","md5":"1eb7638e7a4ed3974b4d3e76733cf8b9","sha1":"cffc718674e937b015fa0ee2617a6a6fe849d095","sha256":"39ebb07cc1552dfcabd9bad392125e5a2e94ec03d6d13ad963a07f6ec7a55ec0","sha512":"9ada0329260758ea6c8cfd8de03012445439d40c278bb4bd88447629bce6d9ce3273fd168245ddfe9c4242accf5ee7d8cca2d8b390f29264b8aae4a81267895c","ssdeep":"96:pxQhqP6uzjKHiqFtdzy+BmvRG9rdnVyNyY9CvZr4usHa+IEgbkSB1JYnSTdY7Ob/:pxiSG/++Bmv+rdoNyY0vZrz+5SPWn3C7","tlshash":"49c1ca8eb0a7643db397866855150001a31ceca6f02447a4adfd8b2d6be2e64c76770d","first_seen":"2026-03-21T10:33:31.201004Z","last_seen":"2026-04-21T02:06:10.081514Z","times_seen":460,"resource_available":true,"data":null}},"time_used":1203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1117,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.0033532.com/bewcdn.txt?t=1776737027194","fqdn":"www.0033532.com","domain":"0033532.com","tld":"com"},"ip":{"addr":"104.18.27.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.0033532.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Apr 2026 15:43:05 GMT","end":"Sun, 05 Jul 2026 16:42:15 GMT"},"fingerprint":{"sha1":"75:95:8C:93:4D:B3:8C:4E:1D:46:1D:6D:F4:F9:A1:0D:27:49:10:64","sha256":"56:0C:28:5E:3E:97:D5:86:AE:16:6A:8C:45:47:97:C8:D0:42:E0:F1:8E:9B:E8:25:E9:46:F2:4D:40:BE:3D:36"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737027194 HTTP/1.1\r\nHost: www.0033532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:03:47 GMT\r\ncontent-type: text/plain\r\ncontent-length: 2\r\ncf-ray: 9ef8d0748a190b61-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: s-maxage=31622400,max-age=0,public\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-meta-version: v7.2.26\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 69E6DB0355EA063537A49377\r\nx-oss-server-time: 2\r\nx-oss-storage-class: Standard\r\nstrict-transport-security: max-age=15552000\r\nset-cookie: __cf_bm=lsSZE2X0iyD75tugW9SVfYL8h0oHg0ZxqHUQxyrNmPQ-1776737027.2834718-1.0.1.1-S77x4evQXHw2FWArIhFYDsmV6436nfymXbltRe662SG_.kWtH2sEOvfnZqX14djE_.BwXS.02dR45K2Z5gCLuW6S_alokKA9A0di8WDZHV2qz55xPeZpg1ONcXosMlFA; HttpOnly; Secure; Path=/; Domain=www.0033532.com; Expires=Tue, 21 Apr 2026 02:33:47 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":80,"dns":60,"connect":1,"send":0,"wait":496,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"528swt-1917-ppp.oss-accelerate.aliyuncs.com/siteadmin/upload/img/1949723273150767106.ico","fqdn":"528swt-1917-ppp.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.102","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:45.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /siteadmin/upload/img/1949723273150767106.ico HTTP/1.1\r\nHost: 528swt-1917-ppp.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zwems.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 21 Apr 2026 02:03:46 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nConnection: keep-alive\r\nx-oss-request-id: 69E6DB0235B82780F690D2CC\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"7B34A81EF1EA6155AE00AE21CA9E73BE\"\r\nLast-Modified: Tue, 12 Aug 2025 10:42:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6458425536499542145\r\nx-oss-storage-class: Standard\r\nCache-Control: max-age=86400,stale-while-revalidate=86400,immutable,proxy-revalidate,public\r\nx-oss-ec: 0048-00000111\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ezSoHvHqYVWuAK4hyp5zvg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"7b34a81ef1ea6155ae00ae21ca9e73be","sha1":"4f555a6246777a8c85ff455a1b729fcdd0a527ee","sha256":"d137265b54970a7817b406f8969c03a336b0ca2935fddb5ba0207625bf2abafa","sha512":"f780f7460f9a460020f728b2e85ea8cfb04289ea4281d245860b9f879509d4d7eb4e7f721b8a99405ef2813ae61abb8a76618ff4b538e0aa998460ba646656a8","ssdeep":"48:aL4IrpezSs2OLaXuPl9KbTa5xaInEkwYTBaUZ8rbpdOvDLm7fO32pCORW82:aLx+2karTavvnEHYlaUIbp+GXwX","tlshash":"1b911d80c38d279aded427f4eda6eea93a72488107943ae9d246f0d9472f39b3457c50","first_seen":"2025-10-09T17:46:07.481739Z","last_seen":"2026-04-21T02:04:21.034812Z","times_seen":28,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":0,"dns":344,"connect":20,"send":0,"wait":172,"receive":0,"ssl":482},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.0011532.com/bewcdn.txt?t=1776737027193","fqdn":"www.0011532.com","domain":"0011532.com","tld":"com"},"ip":{"addr":"47.57.218.1","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.zwems.cc/normal/?cid=6780513","date":"2026-04-21T02:03:47.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.0011532.com","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:14:75:67:11:D1:9B:73:CD:D1:3D:78:B4:9B:72:E4:07:79:B9:89","sha256":"83:A8:51:36:F2:2B:98:9C:C5:BD:B5:D2:B4:92:15:C6:5C:40:DC:A3:8E:41:F7:68:1A:F0:47:26:E3:8E:0A:F8"}}},"request":{"raw":"GET /bewcdn.txt?t=1776737027193 HTTP/1.1\r\nHost: www.0011532.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.zwems.cc/\r\nOrigin: https://www.zwems.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: volc-dcdn\r\ncontent-type: text/plain\r\ncontent-length: 2\r\nstrict-transport-security: max-age=31536000\r\ndate: Tue, 21 Apr 2026 02:03:48 GMT\r\nx-oss-request-id: 69E6DB041FFD113736720D7E\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, HEAD, PUT\r\naccess-control-expose-headers: Etag\r\naccess-control-max-age: 200\r\netag: \"E0AA021E21DDDBD6D8CECEC71E9CF564\"\r\nlast-modified: Mon, 20 Apr 2026 14:28:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4312349438756823821\r\nx-oss-storage-class: Standard\r\nx-oss-meta-version: v7.2.26\r\ncache-control: s-maxage=31622400,max-age=0,public\r\ncontent-md5: 4KoCHiHd29bYzs7HHpz1ZA==\r\nx-oss-server-time: 3\r\ncache-via: cache.n128-014-110-091.bdcdn-sgedge06\r\nx-dsa-origin-status: 200\r\nx-bdsa-cache-status: MISS\r\ncache-via-status: cache.n128-014-110-091.bdcdn-sgedge06(MISS)\r\nx-bdsa-cache-tm: 0-31622400\r\naccept-ranges: bytes\r\nvia: n128-014-110-093.bdcdn-sgedge06.ToB\r\nx-request-ip: 101.47.85.34\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1776737028812c260e7a8a32e9bcb2c2f47c8ae60b\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=79, edge;dur=0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-21T07:33:16.223159Z","times_seen":273015,"resource_available":true,"data":null}},"time_used":1884,"timings":{"blocked":749,"dns":169,"connect":268,"send":0,"wait":383,"receive":1,"ssl":311},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}