{"report_id":"60ab714d-f79a-48ee-9077-f0678ae1a37c","version":6,"status":"done","tags":[],"date":"2025-09-22T12:07:25Z","url":{"schema":"http","addr":"xn--mjy38k.dnwi7y1u508xatk6.com/colig/","fqdn":"xn--mjy38k.dnwi7y1u508xatk6.com","domain":"dnwi7y1u508xatk6.com","tld":"com"},"ip":{"addr":"104.21.95.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"title":"柠檬导航-柠檬福利花园"},"submit":{"url":{"schema":"http","addr":"xn--mjy38k.dnwi7y1u508xatk6.com/colig/","fqdn":"xn--mjy38k.dnwi7y1u508xatk6.com","domain":"dnwi7y1u508xatk6.com","tld":"com"},"ip":{"addr":"104.21.95.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-27T12:07:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"xn--mjy38k.dnwi7y1u508xatk6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"xn--55q202jpdb.lemon1.cc","ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":21,"received_data":566175,"sent_data":11517,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]}]},{"fqdn":"xn--mjy38k.dnwi7y1u508xatk6.com","ip":{"addr":"104.21.95.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2025-09-22T12:07:26.055631Z","last_seen":"2025-09-22T12:07:26.055631Z","alert_count":1,"request_count":1,"received_data":132434,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":1,"received_data":418298,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c24a00583021f56e47917d8ef7c193f","sha1":"a7dc1fb82090665defbbdfe6b44f977f581dce3b","sha256":"1d8f825e09e54764258387907327447fda06af3a39add04a9c7f586d713b095b","sha512":"b63686a12cd13990e8a8f74a9f33cca079a61824cad11070367cf8770098805b4ef3484892b971159e1a6f5d9f31d110499b01bf8cc258565871418d0666f898","ssdeep":"","tlshash":"97c02bac210b3cf046db2b000f2ff600f0033101d4b01c30080123449530e0ba748ca0","size":143,"data":"","first_seen":"2024-08-19T17:41:03.934512Z","last_seen":"2025-12-01T16:34:05.800547Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/common6fd8.js?v=V2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39570a874aa1f79b0561b2ace03417b6","sha1":"0d29dc4f06fb2b0cf895b320ace4a46b7c81932b","sha256":"f537398f0998d42270c91faef338aa26d419d9c34a3e96b4132ff88727654694","sha512":"0ddb7ae55ea6f832aaae305563730945440d7d5c1516a004ce4e46d9adb4a9f63d9a8cae4801a2ed350490df7a558d2a7acab942fe5effa65142505f2f162a0e","ssdeep":"","tlshash":"7961310cf15872b402ffa236853f2747693374aa660680fc75148df92f68b3456b7a7a","size":3420,"data":"","first_seen":"2024-08-19T17:41:03.935992Z","last_seen":"2025-12-01T16:34:05.787704Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jqueryf195.js?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6761f1359b162ea22ebaf501f08d4a9f","sha1":"fab2a859ddb2dd1ed01e25a16ac8602b52464406","sha256":"41e39c8a2ee5a6fd210aa4408d014a469b2052a16e09239c4aeeb5a7b78ecc5d","sha512":"4038d5aeb6feaf7ab39b45a5a78aa085733d8d6d62c9c5bb7ed9a65d6d00e1115a187b6939b2addc05a777cb26204d9ebfe7a799a5d0edddb8b8adc9de51def1","ssdeep":"1536:SPLElssTikEJqRdXXV2p3Aalwjx+aejVh/LZTE4cPgWdrxb/WLj2suW/sZwM9oaR:r/+aeBh/LMPNdrx7WfFWZrlFZDU8Cuh","tlshash":"e483d6d9b3d670629b7b30b850bf050bb17aa8dab44c8c60f158d5d47db4a89807bf2d","size":86805,"data":"","first_seen":"2024-08-19T17:41:03.927193Z","last_seen":"2025-12-01T16:34:05.79568Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jquery.nivo.sliderf195.js?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78528b82e8d72f08427bcb79c0d6b89b","sha1":"722d42805a1c9401c10b70525b188f054883eff9","sha256":"21a40c2251e2053239d5858f5ce02b871296611c0f350c5a8ec5e2139627af1f","sha512":"54cfbaef2a0cb5f4591a65e43b4b9094372bc27d494aa4a106612de8b449a23d868999257eab4fd76c0ce1c36abf4f5fe6ca0437be17dd871c2c63795dec5984","ssdeep":"192:hYWrJYXLvaHpwakr2RaEaR+31k1JqhEr6Gvrdr6ovr9tJM6K1xRkWnF6nnF67nWR:h7Cykr5+OQEHRoBxRkj1ddhphU8","tlshash":"fe62840ee3501d7acdc030f63d2e9e0de9f3a7235922d53885f9912da5e95809623fe9","size":15609,"data":"","first_seen":"2024-08-19T17:41:03.936938Z","last_seen":"2025-12-01T16:34:05.795106Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c7e45976df6512c4d930a751d52eac","sha1":"0b1a1f7800e43be036839118cdb7cb29d4445393","sha256":"9924c05ebf743f1e1cbfdf8a8840a86cd93f3969fdf89e91a9ae8c6235320cc3","sha512":"96e12113f7b4feeadb412669241f4965c4844b0d5eb47d29eb8f623d6155520f7bc89ca16147a6a42589d41c2121cabde2c912a3d89c2beda1c6613819bd6fed","ssdeep":"","tlshash":"0ed0a70292d087080b762b6acd2ec199dd71b5b266cdd87a580dfd5b1994412053d5f5","size":229,"data":"","first_seen":"2024-08-19T17:41:03.935338Z","last_seen":"2025-12-01T16:34:05.801324Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1ea90a12c9ef722305b906cc5a9e94b","sha1":"976b610c42601afd69af5579a82abf819587536f","sha256":"b21bb2ae31c58158577f7d7007bab43c9b1352e0104b9a8951a7c709f2a756ab","sha512":"65f37fa2bc698551fe060166ea4372035a4b494fa4ccdd9c027035f8d0774d582eb865b4accd5ce9bd28973da47d7c3ecc962b92ba6b6855ed4da426088a4c29","ssdeep":"","tlshash":"60b011808032a0a880a030322afff008ac020830028ce28e8ca3ca0fac00830023c8ca","size":89,"data":"","first_seen":"2024-08-19T17:41:03.937832Z","last_seen":"2025-12-01T16:34:05.802072Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BVKTHFQ675","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56e8fcc1c40a384adc78f5ea20537c08","sha1":"b03722bc25fff2da529ed9cf08ada1fb98456ef5","sha256":"e4c7f65c2ae331ea75722e58c4d792e60c899bb3dde04f1bab0fd256b8844b2a","sha512":"0a19222670463df100ec0d8bad1b60f09fd6c31d790761c65a5c6d1195ffc2c479c39d0b100e59e255c9ac37f19071a36fe08e63c70b8b61ee65161a480944dd","ssdeep":"6144:rEsjVeLQd2sK+iFBbjSytugdH9I2/eTCGs:g0MLQd2l5Fbi2p","tlshash":"c0941ade73c674265396f478903f018ba5bb28a2b45cc899f189cce42d74a9a4137f7c","size":417694,"data":"","first_seen":"2025-09-22T12:07:33.857752Z","last_seen":"2025-09-22T12:07:33.857752Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/indexf195.css?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/indexf195.css?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Apr 2023 14:54:54 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dbe-1891\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9FanBId8eZwNjM6IAhZE4LriKLZUhVToVV6LyGzexEroS4m4of9JJQj7co7mO3ARzh5Nu13ELbv%2BKdN66WsZ6oImsnUf4D31VIUhgMD5pBcalkSXzA%3D\"}]}\r\ncf-ray: 9831ade93bf9712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6289,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4924)","md5":"1c3735992aa7a1b688bf51f1bdefe5de","sha1":"e7e76693cf37da164a1b7ce296ef14705a48b35c","sha256":"b9a219e728ebe9dd012c405151a71d79cb564eb81667ab5a83e5aec1a4a4ed01","sha512":"bf526405755d3fcb10608fa543d221dc1ddc82ed4c842931d99373da92910a25a7d3c1c94883e352b56572299573b5b2ee4646e295efba4ac95c0f23e2c0b935","ssdeep":"192:pVful3MYwl1INHRG2CndbhmTu75w/EUH5WVXxkvJBUBozZ6FZ9w67:pVLNlm3CjIuhVX2J3oz","tlshash":"cfd1f02185a4302ef077e4aab491de6e3139c08bb7531bfddb2975b4c41684b69b3788","first_seen":"2025-07-14T02:23:55.800195Z","last_seen":"2025-12-01T16:34:05.785186Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/defaultf195.css?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/defaultf195.css?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Apr 2023 14:54:54 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dbe-611\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8QR0LWHTl4oCG%2Bu9D%2FrEUXIFzR0egXZ4RowismXvyOQJlIQaK6YyVXJnP3IvJZNFyStWB30Fphzivu5LyJ50LFRPyI1dqH6y0hYiTkLOfTHESctxuo%3D\"}]}\r\ncf-ray: 9831ade93bfa712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1553), with no line terminators","md5":"eedf50a13449e4cfc57268acadd5847b","sha1":"f84f9d8c7438fe74ef3dfc3bd936d8be1ad840bb","sha256":"391a000ff317c63c7360d0ddc7494286da97fbd4bc34d3d95ba7979c249e9e25","sha512":"2a787589c46d37e55d00e6faff6b5800b85469adfb653d6809650498cfbcd89d0fb0e69886200229ecdef417251dddf9b05af329108cbfc923b2b954990f37b0","ssdeep":"","tlshash":"3f31b12e3ab8f11ce1a3e164779975b80136ac07ba013c7d99d52dbb8a4f0600753bc2","first_seen":"2025-07-14T02:23:55.811691Z","last_seen":"2025-12-01T16:34:05.793968Z","times_seen":9,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/6.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/6.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18214\r\nlast-modified: Wed, 28 May 2025 16:26:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392f-4726\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLfg%2BqFw4lEDzbW0wur5Rm5%2B9udDR08QLg4g45UXqM6Cw3PSIhjH93gTY46FzekDE7yR5LnZ%2Bqpn25MAghgEgvfoaQQyfq31oa%2BSgvMPolG5GomIag4%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade95c05712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"3803f9aa200fb8ce095ec2411c40e384","sha1":"5315131c1f0cb0e5b59d10f696fcf803dba74111","sha256":"035704640372281887a3ebd9af8916bde2beaa1ef58e000e332ef6e6940e760a","sha512":"74f9dd31563be1fb77239bbfdee9b147254565f0472f16dab98522d6d17e057b3c6188ab60e11c15976410832c31e9d9559df1c88ef251693dd26a27b1260254","ssdeep":"384:VQOMTGvbayAC5s9lUmFSdIJbl4jpVPd6SnVfrcXf/IOD/5:VQzGTalm5mFDspV1J2nIOz5","tlshash":"c782d0031a292515772dad99304633cacfd09fdeb505dafd099bea2f7980ff206891d1","first_seen":"2024-08-19T17:41:03.900449Z","last_seen":"2025-12-01T16:34:05.798366Z","times_seen":10,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/2.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/2.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21227\r\nlast-modified: Wed, 28 May 2025 16:26:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392b-52eb\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qb6865PHjzIusQegh2F5KOs25hmRZ2mMOfzOZZ%2FjhRBDVl9%2FbHSC2kVwjcWrpzk6dUKwuBk9pC2twdEr2UPCmC7Sx1l1GH4fDiMDy5eV3ZahndwCMHo%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade94c00712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21227,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"14b4a6582256771b59194ace23da861d","sha1":"b8e4b7fb6e6b7ab17566db542493e314058044bb","sha256":"281273532fde790eb992d636cafd90cecbf91b40dbae53c1116661a6877ea3ce","sha512":"aef8d4a910bfd23b55863da0e496985d1cecc0a1bb2ad171459ca2b43edab3a1d07822a87ace63c21125d236f6eab5ea32cf2ca6d311e0e9da337368eecf02cf","ssdeep":"384:SgYY1G1VldAR6sIn29WyYvbTm28CV9BFL3d1qLCgke3z96Kc3eNuyCr5D8WKTOcs:Sg01VzAR6sIn5w28GBtdVrPv3eNmr5nx","tlshash":"5792d05c39af31d86b062170c03cad6bc7f890f54484743259b2c616e6a0e3e6ebf48d","first_seen":"2024-08-19T17:41:03.903273Z","last_seen":"2025-12-01T16:34:05.789979Z","times_seen":10,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/3.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/3.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106370\r\nlast-modified: Wed, 28 May 2025 16:26:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392e-19f82\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7enEN50OWgx5fbS4sOYBkPKuQK5npris%2B2J8RSPyw2zZDKkNYKsRccsG9MV0Dan7g2a03L1qQyTPpdOrLvkJi13vzKn0GgThbGCcHSosAf0D5zJvBCI%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade94c01712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1024x716, components 3","md5":"5338f51eead630664855318dbc5d5f77","sha1":"0ad3cadc5d30be16651a841765bd9adab193b183","sha256":"419f88bf65e7446d39e2c13156b929676ebeb1f5f5127a12124706fe024c3afc","sha512":"ac4a346b5dabc464915b9c99148b2a75f78a54c47c4d05e9db53369d7f89e0a0476b9b1f5cfd9e928b2da79e0f7c23c77904b301f1b7628670b3ea918032f44c","ssdeep":"1536:HrAb4WXufJTtD111LCF8a2rvRBOcHgAQnSvENe6FjFaIObilb4C61v1APu1Mu5dA:RJD17ul2bDOCQnrzb4tkPPu5dA","tlshash":"9da31250ce65750e7b9277084ea7e2dfed5f017628d8da0faa8ef767628ec5471420c0","first_seen":"2024-08-19T17:41:03.920262Z","last_seen":"2025-12-01T16:34:05.790599Z","times_seen":10,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--mjy38k.dnwi7y1u508xatk6.com/colig/","fqdn":"xn--mjy38k.dnwi7y1u508xatk6.com","domain":"dnwi7y1u508xatk6.com","tld":"com"},"ip":{"addr":"104.21.95.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T12:06:58.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnwi7y1u508xatk6.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 14:35:48 GMT","end":"Sun, 07 Dec 2025 15:33:50 GMT"},"fingerprint":{"sha1":"FE:1C:87:B5:25:51:3A:FF:E4:41:77:B3:54:7F:6A:3B:D8:DE:07:F7","sha256":"98:23:42:52:73:66:C0:38:F1:05:E6:08:C8:06:02:B9:F8:5E:C4:74:F0:F6:65:A9:81:35:89:FA:30:14:88:00"}}},"request":{"raw":"GET /colig/ HTTP/1.1\r\nHost: xn--mjy38k.dnwi7y1u508xatk6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://蒲公英.lemon1.cc/香水百合/index.html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vQwtXDDulPY%2Fmng9qOYTFyxEJtfFU5MDQ3yBGtY6ooha3zb1zHqCj0cduClP1L3QudU3B0WTvwM2893kDEWnOZ%2F9gRO3EBsp12yHpOGAaFYPQRPkTMFObxLUvnJ\"}]}\r\ncf-ray: 9831ade5dbcd56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131778,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":23,"dns":0,"connect":1,"send":0,"wait":100,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"xn--mjy38k.dnwi7y1u508xatk6.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T12:06:58.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 21 Sep 2025 14:21:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4sZcxtcFCtAYFnUb%2FmVyOO5GHcSVJLwaFZD9EBio%2FNHN5Ot9XIFHfqzmHCJL2MZtUL748lQuaei0Vp8ISaTKh6mm5zn6Fz6Rh02b%2FApRMxypGDSe6g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9831ade6ca2256b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]}],"data":{"size":131778,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (58872), with no line terminators","md5":"ae38c1096cda5ba114a11406023779c9","sha1":"c63ef035a3625e877348ade5acbf5b80f1c82cf6","sha256":"0236af69f5c0fcfb33ad551c1eda68a2cb44b60b30184d2819e82d74712e6b4d","sha512":"d86be65db3906478b21ed125ad0910fd34421d7e9bb00a32d89d209946cb3bb5991282a5febe816f5a0b336c2ed4bf01ecdd5f63f973ee54a22f4d46b141443f","ssdeep":"1536:Zv9RMd5WaiSHx2xdO5LVz+Stntsuu8IBfsj3Ol6UIa72Nb1lOgGyS:7a9IX/OLVTPGf","tlshash":"fdd3b1b746c8a5aa1742ca89d171f73ed04301face427e43e9e24e4ae8447b7d4572ce","first_seen":"2025-09-22T12:07:33.678628Z","last_seen":"2025-09-22T12:07:33.678628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":40,"dns":23,"connect":1,"send":0,"wait":103,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/1.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/1.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46664\r\nlast-modified: Wed, 28 May 2025 16:26:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392b-b648\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tNIAffyZZgzzi%2BHi%2BHHcEI1CWbviXnplKtZT%2F%2BlF27ryC5axOyjp0r4Wtr3VDvR31JEINuxC%2B6kM0Nw0V2wQkL5eUgNvgH2lzARpiOC2B3WLEEDXqA%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade94bff712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46664,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 604x424, components 3","md5":"25110a9b57d3a2c24d16e3a46e9abae6","sha1":"c1ea1aa2b62ca09a2b9eb02beaee5d5fdd1a9188","sha256":"ce47e02090c0ce5beb73f9efaf203af2974f030244d6d534a28f7f4de1ea6ce2","sha512":"65d9ddea65b805d2ee66852f41c173554e5b33ae386dbd962ffb5bb4aed3423cb228fd8325a293180c98bf75b4c48799b410da85515978775762a1e25e04978b","ssdeep":"768:mmYtk42teeSGJ1pyCept9yJUDMMSoF0QGvb0QRCsKxRGg6oX1/FSSqKX1LTmNH:mmYqx7ps9yJUDnlXe4QQsKxRsoXZ4Sqz","tlshash":"fe23024dd6c736c26b4fc8bab469ee7ec5f065e81a5c264f519f02371d6700c846e6c2","first_seen":"2024-08-19T17:41:03.919527Z","last_seen":"2025-12-01T16:34:05.793248Z","times_seen":10,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/top.png","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/top.png HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/cssf195.css?v=2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1073\r\nlast-modified: Mon, 17 Apr 2023 14:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"643d5dbd-431\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tX3fIunZvWp0lzDpl17tWg%2BiAlXf5zHIcAQavONEGbjdObfgP5XwqZPeQz%2FSuPso9%2B0A6a4du%2BuQ6dSCdQc0ciSJ3E3zLyQcZtY5LxH2h4NFEVl5cM%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adeafc1c712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit colormap, non-interlaced","md5":"e8d368758de8437693a294279935dcbf","sha1":"3b9da15bd71e4590cea579d748ba5d8f04c016ff","sha256":"71d0026398001ff50fde2c0970d64165312f5591d34e226d00ee1f7469535c19","sha512":"387fab8cbdab05b8633ec39391a3fbcf88062fdaecedd58d771bffdcbaa5a19fc32c818c017a6ce91356bd94bd91b48f3ad974083c8014920bd0c6315400d698","ssdeep":"","tlshash":"6611758ce660ac02a158b99368f98817e9275c40edd0e16af6cfd82747741fd445c5e7","first_seen":"2024-06-19T01:48:18Z","last_seen":"2026-01-18T15:31:41.955391Z","times_seen":12,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/logo.png","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/logo.png HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/cssf195.css?v=2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 2635\r\nlast-modified: Mon, 17 Apr 2023 14:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"643d5dbd-a4b\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9igtBsOBD0xRRZDs6mh6ctu03nzbeaR%2BBBO34wM6yrcQ5zrfLBHncZHIWupA%2BgkubsqKFvCOf3UkutULfxKeeCK3H9twM7rUBHVNeXuigw33pXF01IY%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adeaec18712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced","md5":"8470a01afd2964021fc73b3c40ac15d3","sha1":"87f95546f8fd926868c05516d307ca60eb4d318c","sha256":"4584cedda7b4b7931cb3f29678874a16781b3320c2138f4e466b1ccd1ee316d3","sha512":"c61efbd6b85d5ed220cbae4c8ea5982bd90e18c7f71003d8f12e1cf7e1240ed6e414df10fa5fe3134173a367ac664e1b40dfbfc03ead90ca0ca144e557f35f88","ssdeep":"","tlshash":"76516f407c384885675feb175867423b984b812e337406b9743e908772f033f49dd8c1","first_seen":"2024-08-19T17:41:03.892734Z","last_seen":"2025-12-01T16:34:05.797157Z","times_seen":10,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jquery.nivo.sliderf195.js?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jquery.nivo.sliderf195.js?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Apr 2023 14:54:58 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dc2-3cf9\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzMQeud46AX%2BDCaKIZOsShOHj4VQNfekHpuViKOH0UyI55MB1cgTyfXzkPmCF64vvZzJeKj8v%2BijMiG%2FlfjTdWDCQuPpBVX0wgpJqfZYb8fliDN96os%3D\"}]}\r\ncf-ray: 9831ade93bfe712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15609,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5098)","md5":"78528b82e8d72f08427bcb79c0d6b89b","sha1":"722d42805a1c9401c10b70525b188f054883eff9","sha256":"21a40c2251e2053239d5858f5ce02b871296611c0f350c5a8ec5e2139627af1f","sha512":"54cfbaef2a0cb5f4591a65e43b4b9094372bc27d494aa4a106612de8b449a23d868999257eab4fd76c0ce1c36abf4f5fe6ca0437be17dd871c2c63795dec5984","ssdeep":"192:hYWrJYXLvaHpwakr2RaEaR+31k1JqhEr6Gvrdr6ovr9tJM6K1xRkWnF6nnF67nWR:h7Cykr5+OQEHRoBxRkj1ddhphU8","tlshash":"fe62840ee3501d7acdc030f63d2e9e0de9f3a7235922d53885f9912da5e95809623fe9","first_seen":"2024-08-19T17:41:03.936938Z","last_seen":"2025-12-01T16:34:05.795106Z","times_seen":10,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/4.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/4.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32045\r\nlast-modified: Wed, 28 May 2025 16:26:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392c-7d2d\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHcTGRnJ11kw17CiUkevzHGYPDs7LgB2eYC0KvvLn9fF3aLsQ5JSONTPa9paISwsTJakes8HmevGod1aJPb4iKBWsW0l%2FmpKSRkpZ5NHM8XQusepbB4%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade94c03712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32045,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x348, components 3","md5":"f942a4d5056b521756924ff8c40bf675","sha1":"eac875aab20d0a4f0727eca305cdb4b831b7fd35","sha256":"2a9f12d5354f467652464b0b0dbfa953b93ad316c8f69170de26b9a0be204218","sha512":"a55230c4daa6109406efe2d54f8b66ef35837c9e00646faaf614404d44a7d64d0de377afc36ce9782e241c46bdddd196b12ae4baaef357a477c401c2cbb4b797","ssdeep":"768:mrQmWpCjgVzSsu2hzvDBAEEVJlYjnAfpYNAHw87pDMn2XMVyTD:IkZSidvVA1EUqAHw8pMSR","tlshash":"72e2e01736bed6d9e1a2a21e4de64bb9bf301d8fd61c83f830da50d9b3d947600c0968","first_seen":"2024-08-19T17:41:03.918446Z","last_seen":"2025-12-01T16:34:05.788353Z","times_seen":10,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/beijing.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/beijing.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45795\r\nlast-modified: Mon, 17 Apr 2023 14:54:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"643d5dc2-b2e3\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovnLTMaVsZxBPasjnbPfdznhgGfWOErwq6gIaa%2Bn%2Btptex51lqFj6Xcfd5TRL%2FUKG03RStIq29j7%2FXpNNOQqjc%2BVzcEqXou1HObi5GGs%2B%2Bgn%2FLJ7l%2FM%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adeadc15712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45795,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 573x458, components 3","md5":"905c90218bb388daa61b501596b2764b","sha1":"3b3694679d541ad8ed33fd073c86496e55110d3f","sha256":"7a253779f90a7455f9858aae69f4023d26d2a53876831ec354ab5ee9d9c8b688","sha512":"b9474e2d6cba60c2a024761e86f84cdda5c24cc5eb763e528c64a44d5e22c8a25162d93b7abe4918d1c0b9bd62b3a9568cefcc9debbbd2b0d515fa37f1310460","ssdeep":"768:1E1/K+xxgSDf4BjhDY8WVT9JRx8Ij+RpwoDNK1qcKYyYnwr0yYedr2jsvSdGRpTk:O1bLgmQFhD678IWK4fYn4SeqsvSATk","tlshash":"cd23f1569a810c4c08f26134510fcb828e9dbb0f9a2c6c0ef9d85cbeb7d94571898f8c","first_seen":"2023-05-31T14:47:10Z","last_seen":"2026-04-03T20:00:53.034966Z","times_seen":141,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BVKTHFQ675","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-BVKTHFQ675 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\nexpires: Mon, 22 Sep 2025 12:06:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139233\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417694,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"56e8fcc1c40a384adc78f5ea20537c08","sha1":"b03722bc25fff2da529ed9cf08ada1fb98456ef5","sha256":"e4c7f65c2ae331ea75722e58c4d792e60c899bb3dde04f1bab0fd256b8844b2a","sha512":"0a19222670463df100ec0d8bad1b60f09fd6c31d790761c65a5c6d1195ffc2c479c39d0b100e59e255c9ac37f19071a36fe08e63c70b8b61ee65161a480944dd","ssdeep":"6144:rEsjVeLQd2sK+iFBbjSytugdH9I2/eTCGs:g0MLQd2l5Fbi2p","tlshash":"c0941ade73c674265396f478903f018ba5bb28a2b45cc899f189cce42d74a9a4137f7c","first_seen":"2025-09-22T12:07:33.857752Z","last_seen":"2025-09-22T12:07:33.857752Z","times_seen":1,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":161,"dns":0,"connect":8,"send":0,"wait":30,"receive":26,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jqueryf195.js?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/jqueryf195.js?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Apr 2023 14:54:57 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dc1-15315\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EH0%2FtB2STxh7o0PMxvDV3z0OOJm7%2FswuUboeMRZ98SJWbz1o8%2FancH4yXJNIbqUKp%2Fl22qFU9%2FP%2BRgcPlbnbiCI9UgqniugX6SZZZcGxiN8B%2FBlTdbw%3D\"}]}\r\ncf-ray: 9831ade93bfc712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86805,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5779)","md5":"6761f1359b162ea22ebaf501f08d4a9f","sha1":"fab2a859ddb2dd1ed01e25a16ac8602b52464406","sha256":"41e39c8a2ee5a6fd210aa4408d014a469b2052a16e09239c4aeeb5a7b78ecc5d","sha512":"4038d5aeb6feaf7ab39b45a5a78aa085733d8d6d62c9c5bb7ed9a65d6d00e1115a187b6939b2addc05a777cb26204d9ebfe7a799a5d0edddb8b8adc9de51def1","ssdeep":"1536:SPLElssTikEJqRdXXV2p3Aalwjx+aejVh/LZTE4cPgWdrxb/WLj2suW/sZwM9oaR:r/+aeBh/LMPNdrx7WfFWZrlFZDU8Cuh","tlshash":"e483d6d9b3d670629b7b30b850bf050bb17aa8dab44c8c60f158d5d47db4a89807bf2d","first_seen":"2024-08-19T17:41:03.927193Z","last_seen":"2025-12-01T16:34:05.79568Z","times_seen":10,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/common6fd8.js?v=V2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/js/common6fd8.js?v=V2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Apr 2023 14:54:57 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"643d5dc1-d5c\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNmv4F14py2aapqpUu1RNn672ISS6HfKImuciXSLp7qx1rM6hSperCfYGIG%2BF6vKsXuiVUsZ12Wedn7DVe3tiyB1Xd8GR%2BCdSu823Yj7CmZHHmLApOA%3D\"}]}\r\ncf-ray: 9831ade93bfd712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3420), with no line terminators","md5":"39570a874aa1f79b0561b2ace03417b6","sha1":"0d29dc4f06fb2b0cf895b320ace4a46b7c81932b","sha256":"f537398f0998d42270c91faef338aa26d419d9c34a3e96b4132ff88727654694","sha512":"0ddb7ae55ea6f832aaae305563730945440d7d5c1516a004ce4e46d9adb4a9f63d9a8cae4801a2ed350490df7a558d2a7acab942fe5effa65142505f2f162a0e","ssdeep":"","tlshash":"7961310cf15872b402ffa236853f2747693374aa660680fc75148df92f68b3456b7a7a","first_seen":"2024-08-19T17:41:03.935992Z","last_seen":"2025-12-01T16:34:05.787704Z","times_seen":10,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/arrows.png","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/arrows.png HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/defaultf195.css?v=2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 824\r\nlast-modified: Mon, 17 Apr 2023 14:54:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"643d5dbf-338\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzi38ap9gBT%2FJknYKOvhf%2FLCdgnzIXh5tKX8dV3F8sXQTb48qM7J1E7WJwIdNbZxD2NwakBZklLRh2CB1nU%2FvfTtbwIlxfxXXlprs5VDNgKu0qhiefM%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adec0c1f712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 30, 8-bit/color RGBA, non-interlaced","md5":"09b24f1a73b9eeb5cc62db7ec0b60bca","sha1":"43e3f77646ac42cdcb449dc9cc53c3a4dff63d19","sha256":"6821ca4ae2508bdba08e189040928a0769f0a71b12fdd4325c3ae80ef5636bb8","sha512":"6cd9fbaf5085e86cfa705375d46fea79e1b68dc77317c4c0fcdc4f079ad517c216eb6543b69bbf06a1a801d8feeb48b7ff6cc0a93f46dc6bbf6c5eb5a2d1d5ff","ssdeep":"","tlshash":"5b0186c54600411e44551dfa2be3051380b66ee907b56bb8053e626f2d44d5c32b9c64","first_seen":"2023-04-06T12:06:14Z","last_seen":"2026-04-03T01:25:35.686288Z","times_seen":1126,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/cssf195.css?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/cssf195.css?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Apr 2023 14:54:55 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dbf-db0\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YQa7xhD61FBhqbRI9nWbyT4rVQ8VWPK4qtT58TznPLlG7oC7LqckUvgbXLg0J4NTZqKYOsV1cbOoy7g0gk52BwhsEO4Dd8A%2BGiCBN%2BMH0%2FLXc4BI9M%3D\"}]}\r\ncf-ray: 9831ade93bf8712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3504), with no line terminators","md5":"32d1987eaaac68a68ac24b1ed942eea9","sha1":"9182e59192a85636196be81dc1d36265b940eb68","sha256":"f7910dc19d11856c6e989312407c9d16543493051207b12fda04677d3dc86b06","sha512":"c49ef21470818b840e7310302bc57a939dbc3ea6a0c6a2e69a1acd7681e25e288de1fb36960347839ade84f73f864e5d73961af37d79d7f3805e45f98a93ad5b","ssdeep":"","tlshash":"d971651286ba708db03fd07975105d497138808faa1b5bb8eb1dba7dc9d20973a33745","first_seen":"2025-07-14T02:23:55.841689Z","last_seen":"2025-12-01T16:34:05.787056Z","times_seen":9,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/nivo-sliderf195.css?v=2.1","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/nivo-sliderf195.css?v=2.1 HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Apr 2023 14:54:54 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dbe-4b1\"\r\nexpires: Mon, 29 Sep 2025 12:06:58 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddy%2F0lvHgHBEDG6upbE%2BixQ%2FWRx8qEawKH9coFvhqk%2FHY9oJQmUAhjTzkE%2FNRoW2KWjCAA17zf2SBy6cTooH8Fyw1GWv6oCPjF5%2F8BW75R7AM8XXCic%3D\"}]}\r\ncf-ray: 9831ade93bfb712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1201), with no line terminators","md5":"5e87ac478fefe6ac8fd48aa9ab3ed879","sha1":"38b7d100fdaaa7aa48820bb9fac184de6ba241af","sha256":"782902b1da8cac93722977d0c16df2c77b870fc7fb60af04ae323dae4baef8a0","sha512":"d565c50833f0a595a59dd56012da24cfd548d81f1532c187872db198e376fe2f46424af37272bd775b3ebd6ef418bdcd96d2ddb8ab53a6f8a211a65fe7a5cdd3","ssdeep":"","tlshash":"4821dd3f9a94522b85f7f32075d65faf00398593be124eae4507b7a18b9f1840c2f584","first_seen":"2024-08-19T17:41:03.928301Z","last_seen":"2025-12-01T16:34:05.794526Z","times_seen":10,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/images/dian.png","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/images/dian.png HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/indexf195.css?v=2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukgKPv90E8C5h%2B8s4SA%2FqzdWreejE57RsrLUKMS4qHOK16r6m8TN0v450kVYG%2BVyhfI20MVDYmJ4%2BcPxTPRqXxe69wKLzxpULppw3MFI7843ONlf7FQ%3D\"}]}\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adeaec19712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-04-03T19:38:02.568916Z","times_seen":32985,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/favicon.ico","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/favicon.ico HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nCookie: _ga_BVKTHFQ675=GS2.1.s1758542819$o1$g0$t1758542819$j60$l0$h0; _ga=GA1.1.1918124341.1758542819\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 17 Apr 2023 14:54:56 GMT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"643d5dc0-10be\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fizz4duK1IQ%2FpIQMUOW51mo9VBwOu%2B1lJA3MWpqwZdNUu%2F%2B3ARoQMgI57blnisc7szzW%2BcYySy9hpnifzpMKwR9fRNYDAtJkChx6ZyBOcOdD5TGbWco%3D\"}]}\r\ncf-ray: 9831adeeac2f712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"847efd5edfed2240980394a62ff2247e","sha1":"8b43a6462c4ded12f78484f75b35d1339a119b33","sha256":"9f4b3962adbc4b118980f98c36586b6f914030d210f52dfc253e95aad4976629","sha512":"f0e9da10dc20ee21a12acb0aad2ba3948b94d84f9d82a79cb7edbec0b1d63dd680fc6614e3cdceb064c44a18e9961cb08906b903f942936bb8a1eacb19880766","ssdeep":"3:sf/z/llfl/t+lnllUddddddddddddddddddddddddddddddddddddddddddddddg:sfyll/","tlshash":"e8910281f303d05cc1480334000643fbc17dac114e74d201144534411c0e4840836b40","first_seen":"2024-08-19T17:41:03.933132Z","last_seen":"2025-12-01T16:34:05.792375Z","times_seen":10,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/5.jpg","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:58.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/img/ppt/5.jpg HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20417\r\nlast-modified: Wed, 28 May 2025 16:26:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6837392e-4fc1\"\r\nexpires: Wed, 22 Oct 2025 12:06:58 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXlVvgMHiVe70K9xtCUhkLBNZLCbfhWWusNvoUmiN%2FO2hYBy%2Fz90pC0Af%2F0lAesnQqtkzMXbmcIJdyTtq6p%2BykW424LM7iRdkEA0zu5DS588Vf8cQpo%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831ade94c04712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20417,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 447x300, components 3","md5":"b7698f578e5c297bcfbd6040e9cc3011","sha1":"fdc2c51e660ef597ebb356cd50995fc3a042b5cf","sha256":"c604ac91dc869e5690a97ca3adb21e702c93d59c0b3a810974c7062530a7799b","sha512":"8ca4f4b869415ab1b7a5f5389cedb9513ab543f0844bcf9d0effd0c4944a3f41848b21722258893a5f71d0bbfe208cffe4a8d06ee1ff6306da1c2e9d0d0acd03","ssdeep":"384:w52HVAzXoLmV27u83fXPa/NMQ7KuFW4bw3VlRPGeZJDN0maW97X0aTLUmHQR:w521TSgiakKuFWqwrROeTNHDdX0ILNHC","tlshash":"1492d02e5747c819ef6ba5229e9100a2f6aade7e4a2104b16340bec4d43ddb08d573a6","first_seen":"2024-08-19T17:41:03.901483Z","last_seen":"2025-12-01T16:34:05.796286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/title.png","fqdn":"xn--55q202jpdb.lemon1.cc","domain":"lemon1.cc","tld":"cc"},"ip":{"addr":"104.21.43.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/index.html","date":"2025-09-22T12:06:59.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemon1.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 21 Aug 2025 06:33:17 GMT","end":"Wed, 19 Nov 2025 07:31:48 GMT"},"fingerprint":{"sha1":"83:37:52:CC:E3:1E:B6:17:8F:F0:1A:CF:2B:F9:51:5F:CC:AD:CE:F3","sha256":"B9:84:61:8D:58:D7:8F:F6:73:85:19:2A:29:DB:EA:A0:D1:79:4D:9D:EC:DF:EA:E2:01:7C:B5:38:81:22:58:93"}}},"request":{"raw":"GET /%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/title.png HTTP/1.1\r\nHost: xn--55q202jpdb.lemon1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--55q202jpdb.lemon1.cc/%E9%A6%99%E6%B0%B4%E7%99%BE%E5%90%88/css/indexf195.css?v=2.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 12:06:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1175\r\nlast-modified: Mon, 17 Apr 2023 14:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"643d5dbd-497\"\r\nexpires: Wed, 22 Oct 2025 12:06:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7H%2B0PpxXfWgLesDRGgrm3%2BltBQBaswZt1VmJkStEYmJZP9Pc9G77FSz98RiB2FiiF%2BvG%2BV1M2tGPILFlnDDK1Qt2RmmdcrwZOqQwWL%2Fwo9mlyuWt9o%3D\"}]}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=0\r\ncf-ray: 9831adeafc1a712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 36, 8-bit/color RGBA, non-interlaced","md5":"a7363176bac0fc1517425ac6e7a08517","sha1":"7ca2b80b39d52e6a943bdc94420276a013f27553","sha256":"64823b686569f3d9610db8d4f12a4f34d6f6b104419f5b0b7c2d1babdb376c16","sha512":"78cb3025af8275966640b75f7f03b0b1048d4bf77af0f83c160922a5480ac267c60cba09a17efd081c81e3a5d73e7b2e5b52d8fccce6d45ac41db48a81fde1f4","ssdeep":"","tlshash":"9a21448bf6a09d81e60c949624e6823b48120c44a9c4ad7eb9cbd96359701b8485d1df","first_seen":"2024-08-19T17:41:03.930845Z","last_seen":"2025-12-01T16:34:05.797693Z","times_seen":10,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}