{"report_id":"69429e25-c05e-43c7-8c24-e564afac7bdb","version":6,"status":"done","tags":[],"date":"2026-03-10T11:57:00Z","url":{"schema":"http","addr":"usdc.ssse.cyou","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"usdc.ssse.cyou/","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"title":"CIRCLE","dom":{"size":201465,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64530)","md5":"fe2677f41d7956302f529244febc138a","sha1":"04975bec42b40e4db64afecd06bbbc4655a97a27","sha256":"f9efdcf21d1b356ac9abfee1adf9a82232d7d7a978d26a74f97cf64813b7cca8","sha512":"53f32b65e15ca220dc24b5bd9deafac9f2bc5833669b77c722cea39ac7884e0eeac2fb144e478380c2d2c95fcdfbe8c3c755310f47c7c1eb33faf05b66a27e03","ssdeep":"1536:rLoQxht7Pl76MLcrovkaiYMbmXiLohDHEsbr8n:rLoQxr97u3aiYMaXiLabw","tlshash":"47147988b2553b38787ec327e560a78b301af202bafddd77f5143e8a574ad04c54a58b","dom_hash":"domhash8c5909c5b42c90097e0e157a27b824a9","first_seen":"2026-03-10T11:57:10.462022Z","last_seen":"2026-03-10T11:57:58.617061Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdc.ssse.cyou","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":0,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T11:57:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"usdc.ssse.cyou","ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-03-10T11:57:02.981759Z","last_seen":"2026-03-10T11:57:02.981759Z","alert_count":0,"request_count":6,"received_data":3222858,"sent_data":3278,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kfvip.dlyunkefu.com","ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-01-27","domain_rank":0,"first_seen":"2025-10-02T13:05:40.455787Z","last_seen":"2026-01-23T12:26:52.293881Z","alert_count":0,"request_count":4,"received_data":276322,"sent_data":2300,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"domain_registered":"2020-11-24","domain_rank":0,"first_seen":"2025-08-26T01:11:49.573281Z","last_seen":"2026-02-27T02:37:06.731457Z","alert_count":0,"request_count":1,"received_data":2417,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"houtai.ssse.cyou","ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":872,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?accountid=159011\u0026visitorid=4906943992921404587\u0026sessionid=5262279511702254200\u0026cseqid=1766392308904\u0026ctag=\u0026act=polling\u0026callback=jsonp17731438011262","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b5fe53700559b0b8095ed580d86318a","sha1":"1b680ba5a91a71db9081b5e71840a9e251627932","sha256":"cd1f41ae972e8be6cae65138d2c1549ced352f198d7f156e1a7261e70ab5d054","sha512":"c5f3298820e866faef28f71aab1d8923a01cf8d2fb59abc548feef4c944eddf7d359a074942bf8deb8a43752fb933c88884fd4510917bdaa15360031d49aed06","ssdeep":"","tlshash":"02c08c914c9816030b8830930c2b194beff03a748e0853b18daa080c86b0aaaa712824","size":161,"data":"","first_seen":"2026-03-10T11:57:10.467231Z","last_seen":"2026-03-10T11:57:10.467231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcbe5e9e0d8d0bcff72863fa182fc6fe","sha1":"0759a4eb3f48c0ffd94166b58f63316e5e2c8da1","sha256":"b4e1115512748cc77d9816178c0d48098a9dbcd058312529a6568df657a8e27a","sha512":"5c3267a58f1ddc816404655a835b0baeecedee43927a371f6fc755662fcc03145bbc66aff7ee92b23a4749eab0521a505dca5a586a6abb9019e2f93d76821299","ssdeep":"","tlshash":"2411164b580934d13fd422552eeb770de2755411e952f56bf4f7e450386685e910ac4c","size":912,"data":"","first_seen":"2026-01-23T12:26:16.962208Z","last_seen":"2026-03-10T23:08:06.018227Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/Web/js/mivisit.js?_=t","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb7ca16b201446a5c124023ebefb0313","sha1":"a62e2876cc2e5bd35df6d4fd540a7e1745581b48","sha256":"5a1cbff45f72e753309f924736d1ab7d1dc1526ad46df28a1efa7ac513c65842","sha512":"8080a0e90b347966d922a82fd2499b440644651396ffe887699b95418ed1696e2ef216c21aa5dec0e1a6f90f16e16200028e78b80372e32fd3e1c3ec0016d358","ssdeep":"1536:7YO1FBWy+n3m4+wK4hDkgUkHQuj9LR+PiVWkdknlkltNYHT3IzzbtDqqk+6YsQeQ:8BR+N4hz1FVWkdknVDqhCQeQ","tlshash":"e24401e653e52ebd5d739614bd3b788cd8fd2cd50a8b904ea223b848ca7d5c143a1339","size":273035,"data":"","first_seen":"2025-12-07T15:04:07.748224Z","last_seen":"2026-03-28T18:24:47.504401Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026callback=jsonp17731438006280","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b4f38aea60fb071fa4437f57ce3b593","sha1":"0a054b90c92f62fda69c2b8dc20070a7cbb5aea4","sha256":"430a9598bf41e87d04ca72ecb8b7fc72a70978df0dd014530679721b3b09cae2","sha512":"d772febdbf7c75e8f572bf71de77f50c13f5745eb3a237353dc87cba848b029d5e50764ec055e9234bbe2d9a5885da13d235f49e9ac7370acf0c5ba5eca8ae79","ssdeep":"","tlshash":"1511dc484eff7a114b1d91636c9fb88d806d3a92eec40660cb7d881866c8a17b37544b","size":951,"data":"","first_seen":"2026-03-10T11:57:10.470458Z","last_seen":"2026-03-10T11:57:10.470458Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=start\u0026accountid=159011\u0026visitorid=4906943992921404587\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17731438008741","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b046c50f1a726750ebe323f8d3400da","sha1":"d83f8d9496fddf1c6fa468aa0845721301b64d57","sha256":"82fa35e6186bed2f3bb6040ea51b1950223a92eff9922a5ebf46be9ded445c6e","sha512":"e802d58b6ad7a4f4dcf39be52b10c57f5d60f047da4b8dd0884a2be974516a4eb07e6b8e008e8fb5c872d68555fa47bc96a2c8b9d11736deebbba994b484a387","ssdeep":"","tlshash":"b1d0a7811dac35515a0831931d556a8b9f717074de4415e2c5bdc90a6b74a669b21834","size":242,"data":"","first_seen":"2026-03-10T11:57:10.471337Z","last_seen":"2026-03-10T11:57:10.471337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/static/js/main.16a68cd0.js","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1393889b574bf69706b368fdcfc2f4be","sha1":"b32ae5c72e27916dbe290cf001205e48754732cf","sha256":"592b5d333020734051e4012d4d2278f24e4bdc4420f9f8c5a629278dc7b063b6","sha512":"81a7a80c1bde51e3f3c34dd9d5915a91580a3f3afa0222bcffc600a5fc79c32d4f770c51d72d8ea13fd4dc9992b3983120454d9e7580982a3992fb44637a0ce2","ssdeep":"49152:k10p/+cWuyjfs2W7tF3RUuAekHhlNGLlkWA2iG2K0HHACcBjvLdsz4mpjmacWLkN:Q5IcE","tlshash":"e4e55b9c7645b0a542a750e548bf140bf3366908a40ec4a4f2b9d8da39fd94eb237f3d","size":3156966,"data":"","first_seen":"2026-03-10T11:57:10.47559Z","last_seen":"2026-03-10T11:57:58.626878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdc.ssse.cyou/","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T11:56:38.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:39 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 17:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af07c1-60a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1546,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1520), with no line terminators","md5":"68ac7397b5781d3355009b3e8f1b4e38","sha1":"2c2177f9672ce06e5fc501a1843d34cc97b62674","sha256":"04f7c8776b6ce7e5703a4d728ea1d9f838b81338b0310c233e0c2c2b957a2bff","sha512":"de03b774e6c132ef201058b52fcfd4155a8d622285a92eba5f47ca3e1dc439a490115318896e85df372d032c7d6d2d5906d2e5aa4ecda6b628bdb6a231ce663e","ssdeep":"","tlshash":"823174878c0598c93bb013b53df3f30dd5a97410ad42fc66b8e2a4a018a5f8e891a848","first_seen":"2026-03-10T11:57:10.463739Z","last_seen":"2026-03-10T11:57:58.618421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":376,"dns":64,"connect":151,"send":0,"wait":151,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/static/js/main.16a68cd0.js","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:39.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET /static/js/main.16a68cd0.js HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 09 Mar 2026 17:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af07c1-302be6\"\r\nexpires: Tue, 10 Mar 2026 23:56:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3156966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"d9956c90b2028121dc40eab1e376e679","sha1":"4335ec41830c25df30122325bb834109e0c804dd","sha256":"c03d00cbad783149619e1f8e75922c82d3f7ba27f439d4b281909a9033c1fcd6","sha512":"bdef1092ce7fbf77109c2ce31a0a528763c9b0f295773d3bdd411fc78655888d7c58711775c4550b91a0ef7c26d53a1dd0a60ac64b97b8c22c8372fb24ab6d35","ssdeep":"12288:k10UXXrh+Gi/t4UDQVMwayjXPiT2tIdZjhF3RUuAeQ2E6XNUL:k10UXC/+cWuyjXPs2W7tF3RUuAekL","tlshash":"ff253ad87685f06153a351f6407f180bb33a2909a80d8960f275e8de3db954ea27bf3d","first_seen":"2026-03-10T11:57:10.464964Z","last_seen":"2026-03-10T11:57:58.621592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/static/css/main.24419ee5.css","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:39.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET /static/css/main.24419ee5.css HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 17:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af07c1-8bf6\"\r\nexpires: Tue, 10 Mar 2026 23:56:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35785)","md5":"bfeb4db271fb31500d9769b965cdca65","sha1":"623c3011de3f5b5b6b8ee0c306d50f058274ce2d","sha256":"8f1ba3590da923340f3f1b5cbd33fa202384996cceb87a9d6af8ad0fb52fc98a","sha512":"3d7dcb15eca696ba1230ba13a98fda55f80b0ce0859815971160354e88b422adc1b4b15a3ffac946b2b6290eaa8a89ece670c8017e028f1224910ed9d54bfe0a","ssdeep":"768:S9Gf2SeyVrCai8OX8s63xf9ftl+Wwp74s2f:SMf2SC3w37fvn","tlshash":"88f272127714353ef56fc59494d2a6dab014ea41c1bb82ffea226239c6ca2d31bb570c","first_seen":"2026-03-10T11:57:10.466057Z","last_seen":"2026-03-10T23:08:06.016103Z","times_seen":4,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?accountid=159011\u0026visitorid=4906943992921404587\u0026sessionid=5262279511702254200\u0026cseqid=1766392308904\u0026ctag=\u0026act=polling\u0026callback=jsonp17731438011262","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /api/visit?accountid=159011\u0026visitorid=4906943992921404587\u0026sessionid=5262279511702254200\u0026cseqid=1766392308904\u0026ctag=\u0026act=polling\u0026callback=jsonp17731438011262 HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/x-javascript;charset=utf-8\r\nContent-Length: 161\r\nConnection: keep-alive\r\nDate: Tue, 10 Mar 2026 11:56:41 GMT\r\nX-Powered-By: ASP.NET\r\nSet-Cookie: SERVERID=a59c87f00f33dbed70c8bc80ad394f34|1773143801|1773143801;Path=/\r\nVia: ens-cache29.l2hk12[9,0], ens-cache11.gb6[213,0]\r\nTiming-Allow-Origin: *\r\nEagleId: 4f85b09f17731438011368127e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7b5fe53700559b0b8095ed580d86318a","sha1":"1b680ba5a91a71db9081b5e71840a9e251627932","sha256":"cd1f41ae972e8be6cae65138d2c1549ced352f198d7f156e1a7261e70ab5d054","sha512":"c5f3298820e866faef28f71aab1d8923a01cf8d2fb59abc548feef4c944eddf7d359a074942bf8deb8a43752fb933c88884fd4510917bdaa15360031d49aed06","ssdeep":"","tlshash":"02c08c914c9816030b8830930c2b194beff03a748e0853b18daa080c86b0aaaa712824","first_seen":"2026-03-10T11:57:10.467231Z","last_seen":"2026-03-10T11:57:10.467231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET /static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nCookie: VID_1e111567091f85173a=4906943992921404587; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5262279511702254200; AVID_159011=4906943992921404587\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET /static/media/airdrop-banner.c80fa4b1b6b5d828d0b9.png HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nCookie: VID_1e111567091f85173a=4906943992921404587; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5262279511702254200; AVID_159011=4906943992921404587\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Mar 2026 17:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af07c1-5ad1\"\r\nexpires: Thu, 09 Apr 2026 11:56:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 313, 8-bit colormap, non-interlaced","md5":"5d82fc2f2c6e11fa5154df6c036e74a6","sha1":"164365857484f3570ca4f434eca66ddd9b41ad46","sha256":"846449787b27c5fbd950ac680024ef95e4def49fcaddd02207346f2747d3153a","sha512":"b1680f7e055a413ea9988652c9401b0f14f37c675d1d9997099ff9f537c13ad1a0c1382158afe497985265df12fd03ec515834cffd9f08a810bff2a6fdf92195","ssdeep":"384:YiBAPU8StYntjkH84MhrCLVZfECo+iMprePtcCXtAbcMhFfVmLRLJw8/oipyowvz:qU8qYntjy8bhrCpZfEQi/cC97+fOLJ9c","tlshash":"e7a2d00e2d764d383b504248a07453424fe628fcea3666ae95e03b77add94d4d1f1a3f","first_seen":"2026-01-23T12:26:16.952008Z","last_seen":"2026-03-10T23:08:06.002768Z","times_seen":10,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/Web/js/mivisit.js?_=t","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:40.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /Web/js/mivisit.js?_=t HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/javascript\r\nContent-Length: 64410\r\nConnection: keep-alive\r\nDate: Tue, 10 Mar 2026 11:53:15 GMT\r\nAccept-Ranges: bytes\r\nX-Powered-By: ASP.NET\r\nVia: ens-cache37.l2de4[0,0,304-0,H], ens-cache24.l2de4[0,0], ens-cache8.gb6[44,43,200-0,H], ens-cache11.gb6[47,0]\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 25 Nov 2025 05:16:18 GMT\r\nContent-Encoding: gzip\r\nAge: 205\r\nAli-Swift-Global-Savetime: 1773143595\r\nX-Cache: HIT TCP_REFRESH_HIT dirn:12:533756262\r\nX-Swift-SaveTime: Tue, 10 Mar 2026 11:56:40 GMT\r\nX-Swift-CacheTime: 3600\r\nTiming-Allow-Origin: *\r\nEagleId: 4f85b09f17731438004797360e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":273035,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65339), with no line terminators","md5":"fb7ca16b201446a5c124023ebefb0313","sha1":"a62e2876cc2e5bd35df6d4fd540a7e1745581b48","sha256":"5a1cbff45f72e753309f924736d1ab7d1dc1526ad46df28a1efa7ac513c65842","sha512":"8080a0e90b347966d922a82fd2499b440644651396ffe887699b95418ed1696e2ef216c21aa5dec0e1a6f90f16e16200028e78b80372e32fd3e1c3ec0016d358","ssdeep":"1536:7YO1FBWy+n3m4+wK4hDkgUkHQuj9LR+PiVWkdknlkltNYHT3IzzbtDqqk+6YsQeQ:8BR+N4hz1FVWkdknVDqhCQeQ","tlshash":"e24401e653e52ebd5d739614bd3b788cd8fd2cd50a8b904ea223b848ca7d5c143a1339","first_seen":"2025-12-07T15:04:07.748224Z","last_seen":"2026-03-28T18:24:47.504401Z","times_seen":21,"resource_available":true,"data":null}},"time_used":967,"timings":{"blocked":431,"dns":320,"connect":26,"send":0,"wait":76,"receive":27,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026callback=jsonp17731438006280","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:40.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /api/visit?act=init\u0026cptid=1e111567091f85173a\u0026device=0\u0026lng=en\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026callback=jsonp17731438006280 HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/x-javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 10 Mar 2026 11:56:40 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\nSet-Cookie: SERVERID=cda147b4721cf6298b6f3d38e6bd75e1|1773143800|1773143800;Path=/\r\nContent-Encoding: gzip\r\nVia: ens-cache29.l2hk12[7,0], ens-cache11.gb6[206,0]\r\nTiming-Allow-Origin: *\r\nEagleId: 4f85b09f17731438006407526e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":951,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with very long lines (951), with no line terminators","md5":"8b4f38aea60fb071fa4437f57ce3b593","sha1":"0a054b90c92f62fda69c2b8dc20070a7cbb5aea4","sha256":"430a9598bf41e87d04ca72ecb8b7fc72a70978df0dd014530679721b3b09cae2","sha512":"d772febdbf7c75e8f572bf71de77f50c13f5745eb3a237353dc87cba848b029d5e50764ec055e9234bbe2d9a5885da13d235f49e9ac7370acf0c5ba5eca8ae79","ssdeep":"","tlshash":"1511dc484eff7a114b1d91636c9fb88d806d3a92eec40660cb7d881866c8a17b37544b","first_seen":"2026-03-10T11:57:10.470458Z","last_seen":"2026-03-10T11:57:10.470458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kfvip.dlyunkefu.com/api/visit?act=start\u0026accountid=159011\u0026visitorid=4906943992921404587\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17731438008741","fqdn":"kfvip.dlyunkefu.com","domain":"dlyunkefu.com","tld":"com"},"ip":{"addr":"79.133.176.226","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:40.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kfvip.dlyunkefu.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 17 Nov 2025 00:00:00 GMT","end":"Mon, 16 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A3:B8:20:AE:1F:86:FF:23:FF:40:F1:B9:8E:73:92:80:28:2C:FE:F9","sha256":"7B:06:33:6C:A3:65:DB:46:0E:E1:2F:59:38:A4:64:34:AF:D2:C0:6B:EE:22:62:FF:26:DA:3C:FD:3C:D9:CC:B7"}}},"request":{"raw":"GET /api/visit?act=start\u0026accountid=159011\u0026visitorid=4906943992921404587\u0026device=0\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026page=https%3A%2F%2Fusdc.ssse.cyou%2F\u0026pagetitle=CIRCLE\u0026lng=en\u0026color=24\u0026screen=1280*1024\u0026timezone=0\u0026visittimes=0\u0026cseqid=1000000000\u0026cptid=1e111567091f85173a\u0026callback=jsonp17731438008741 HTTP/1.1\r\nHost: kfvip.dlyunkefu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Tengine\r\nContent-Type: application/x-javascript;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 10 Mar 2026 11:56:41 GMT\r\nVary: Accept-Encoding\r\nX-Powered-By: ASP.NET\r\nSet-Cookie: SERVERID=a59c87f00f33dbed70c8bc80ad394f34|1773143800|1773143800;Path=/\r\nContent-Encoding: gzip\r\nVia: ens-cache4.l2hk12[18,0], ens-cache11.gb6[213,0]\r\nTiming-Allow-Origin: *\r\nEagleId: 4f85b09f17731438008857830e\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":242,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5b046c50f1a726750ebe323f8d3400da","sha1":"d83f8d9496fddf1c6fa468aa0845721301b64d57","sha256":"82fa35e6186bed2f3bb6040ea51b1950223a92eff9922a5ebf46be9ded445c6e","sha512":"e802d58b6ad7a4f4dcf39be52b10c57f5d60f047da4b8dd0884a2be974516a4eb07e6b8e008e8fb5c872d68555fa47bc96a2c8b9d11736deebbba994b484a387","ssdeep":"","tlshash":"b1d0a7811dac35515a0831931d556a8b9f717074de4415e2c5bdc90a6b74a669b21834","first_seen":"2026-03-10T11:57:10.471337Z","last_seen":"2026-03-10T11:57:10.471337Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdkqybhkbstatic-1.tos-accelerate.volces.com/Web/images/float/desktop/online0.png","fqdn":"mdkqybhkbstatic-1.tos-accelerate.volces.com","domain":"volces.com","tld":"com"},"ip":{"addr":"217.198.191.72","port":443,"asn":21859,"as":"ZEN-ECN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tos-accelerate.volces.com","organization":"北京火山引擎科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 05 Jan 2026 01:46:05 GMT","end":"Sat, 06 Feb 2027 01:46:04 GMT"},"fingerprint":{"sha1":"90:FF:7F:56:C3:20:F8:F6:15:B4:28:BA:85:DB:09:57:C2:29:F4:52","sha256":"67:BD:A2:11:23:8C:B5:7A:CB:A5:2C:28:0A:37:0A:90:0C:AA:28:1A:CD:8E:B5:77:17:72:F2:91:02:D0:4A:83"}}},"request":{"raw":"GET /Web/images/float/desktop/online0.png HTTP/1.1\r\nHost: mdkqybhkbstatic-1.tos-accelerate.volces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: volc-dcdn\r\nContent-Type: image/png\r\nContent-Length: 1610\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nDate: Tue, 10 Mar 2026 11:56:42 GMT\r\nETag: \"de0e7b6c8198cea81a92ee7da9106e09\"\r\nLast-Modified: Wed, 20 Aug 2025 16:17:05 GMT\r\nx-tos-create-time: Wed, 20 Aug 2025 16:17:05 GMT\r\nx-tos-hash-crc64ecma: 4451317328670018963\r\nx-tos-id-2: 8bc201b006fa7bc769b006fa-bf522e5-1vzvha-GO-ch-tos-1az-front-aza-2\r\nx-tos-request-id: 8bc201b006fa7bc769b006fa-bf522e5-1vzvha-GO-ch-tos-1az-front-aza-2\r\nx-tos-server-time: 3\r\nx-tos-storage-class: STANDARD\r\nvia: n104-166-141-100.bdcdn-defra02.ToB\r\nx-request-ip: 91.90.42.154\r\nx-tt-trace-tag: id=5\r\nx-dsa-trace-id: 1773143801f8c516c5b15af0fca77fea6c0c27838a\r\nX-Dsa-Origin-Status: 200\r\nserver-timing: cdn-cache;desc=MISS, origin;dur=180, edge;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"de0e7b6c8198cea81a92ee7da9106e09","sha1":"42082c813d0df6cbfc989f27fb7af0305af86578","sha256":"c330cbd33175ed8f5ab7092315b2628e0b0e2d4a7f0cd19cb1cad0267f7846ef","sha512":"b966f2e604f8a6befb03b98e6ae0634b97cdef75ec5f76948b044a32afa97630cd5ff789b717c8099245c598aa3b28048bdf96f9a980b8add4c3f3ece7de38be","ssdeep":"","tlshash":"0731e82afc08b9c07cabd74054f241dbcd476ac166b0e0b08cf8f4275d01275265ded2","first_seen":"2023-11-12T06:55:00Z","last_seen":"2026-04-08T13:17:15.850427Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1743,"timings":{"blocked":767,"dns":641,"connect":29,"send":0,"wait":208,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"houtai.ssse.cyou/api/getAirdropStatus","fqdn":"houtai.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"houtai.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:38:37 GMT","end":"Sun, 07 Jun 2026 16:38:36 GMT"},"fingerprint":{"sha1":"DB:CC:CB:29:A4:2E:DA:85:C2:47:7D:E4:53:3A:91:3B:CD:F6:1F:04","sha256":"44:B9:56:B1:45:6F:3C:9A:C7:50:5C:E6:CB:9B:BE:97:7C:66:3A:84:D0:5F:50:93:75:F2:A8:00:C8:70:C5:7C"}}},"request":{"raw":"GET /api/getAirdropStatus HTTP/1.1\r\nHost: houtai.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.ssse.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Content-Type, Authorization, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nset-cookie: PHPSESSID=nnph9f9715ajn63qk15qjrvoji; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"90dba6fb3e28fc2d23b8d92795274a1e","sha1":"aff95ee256a1bd38cd31076b3fe167478d00bba6","sha256":"a433bc258e1548f0dd64e37b4ec812f96e51062889eb95f63e5e53f636b5b20c","sha512":"20aa83b4a07647f55078dd40195f5d3aea8767e9b9855a11cbf8a6f14656b479bfd6116e0b5f9566161524e2a4dee0557035d3bba80ae25d4239f135abf87951","ssdeep":"","tlshash":"9f9002495618168b0562450e504a0166409628c0486487f4880c815522685a16695252","first_seen":"2026-03-09T00:33:27.987482Z","last_seen":"2026-03-10T23:08:06.003968Z","times_seen":6,"resource_available":false,"data":null}},"time_used":981,"timings":{"blocked":403,"dns":93,"connect":151,"send":0,"wait":175,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.ssse.cyou/logo.png","fqdn":"usdc.ssse.cyou","domain":"ssse.cyou","tld":"cyou"},"ip":{"addr":"154.201.77.87","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.ssse.cyou/","date":"2026-03-10T11:56:41.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.wssrvip.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 16:37:41 GMT","end":"Sun, 07 Jun 2026 16:37:40 GMT"},"fingerprint":{"sha1":"4C:EF:F7:75:A1:58:F6:7B:68:C0:AE:43:AA:A3:12:7C:2E:E4:BB:E9","sha256":"F9:CE:46:64:B7:73:9F:18:9A:B6:51:95:96:0D:1B:51:12:0C:04:74:9D:4C:85:48:2A:4F:DE:91:69:F4:67:B9"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: usdc.ssse.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.ssse.cyou/\r\nCookie: VID_1e111567091f85173a=4906943992921404587; VP_1e111567091f85173a=1; VT_1e111567091f85173a=1; SID_1e111567091f85173a=5262279511702254200; AVID_159011=4906943992921404587\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 10 Mar 2026 11:56:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Mar 2026 17:47:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69af07c1-aba\"\r\nexpires: Thu, 09 Apr 2026 11:56:42 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"4f85a188ac43792a058b7a9286e6261a","sha1":"dfe981ecc604666b320ed3ba7f6fde1dbe6822a3","sha256":"e59bed09005751a5e20f52ff26011d659689cb3b0cd6faaf03d6ac224c586e68","sha512":"dba1b93b02910d2c6ffe678bfd77c79dea9999c84b0b27df4ec8b29f35b21814469858e67ad01c99532610126740e1ab95575481e7cf0dab66953504ae5aee4f","ssdeep":"","tlshash":"d8514cd4321fcf41ed7234d3a02291b4f82925c6f43a67a44db75d461c4bfe091f0658","first_seen":"2026-01-23T12:26:16.942125Z","last_seen":"2026-07-29T16:43:34.752484Z","times_seen":15,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}