{"report_id":"71d5e1bb-17e6-4045-b15c-52210a4ef70f","version":6,"status":"done","tags":[],"date":"2026-02-02T12:25:18Z","url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4#61770035098851","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"title":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","dom":{"size":2314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (352)","md5":"6c38a264f9484bc9c73d7f4c9cb10403","sha1":"e788a00d4a2ee1f68e7a64769209d778b719616c","sha256":"cae961e6f4594d220d4fd770d73b0541834889698cf8585f901cb1208344fd1e","sha512":"d6228fadf2bf38333086e76c0a78fb6de42db19aea31b9627410c7b0881cbc4c4de748c0a0b1ae345641311d9e277eb49b51b43bbe47152b32fe2a88bfcc7537","ssdeep":"","tlshash":"1e41f19bad5698a517e61559637fe50cb1e3aa0ee47ae40178ece0100f40fe70d1df84","dom_hash":"domhashbc14d2837e88129de2a1ea8073400418","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T12:25:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-01T22:20:39.584991Z","alert_count":0,"request_count":2,"received_data":873970,"sent_data":858,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnmi.com","ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-11","domain_rank":463756,"first_seen":"2021-02-01T17:26:14Z","last_seen":"2026-02-02T10:38:26.664266Z","alert_count":0,"request_count":6,"received_data":106708,"sent_data":2555,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hm.baidu.com","ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"domain_registered":"1999-10-11","domain_rank":54491,"first_seen":"2012-05-26T08:38:45Z","last_seen":"2026-02-02T01:44:03.24111Z","alert_count":0,"request_count":7,"received_data":123037,"sent_data":3603,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdn.res.wiki","ip":{"addr":"104.21.54.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-05-14","domain_rank":2187105,"first_seen":"2022-04-13T12:55:53Z","last_seen":"2026-01-31T02:21:34.462935Z","alert_count":0,"request_count":1,"received_data":61470,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xuatj.cn","ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2026-01-10T06:57:02.015996Z","last_seen":"2026-01-10T06:57:02.015996Z","alert_count":0,"request_count":6,"received_data":29525,"sent_data":2831,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"u.jsdelivr.me","ip":{"addr":"172.67.222.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-17","domain_rank":6320668,"first_seen":"2024-12-29T17:00:32.942237Z","last_seen":"2026-02-02T12:08:27.383063Z","alert_count":0,"request_count":1,"received_data":10774,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":2,"received_data":97754,"sent_data":911,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.cc","ip":{"addr":"172.67.202.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-10","domain_rank":2789656,"first_seen":"2021-04-12T02:06:51Z","last_seen":"2026-02-02T12:08:27.586903Z","alert_count":0,"request_count":1,"received_data":6033,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df85c7590764906bb4ae4df225217cfd","sha1":"18b6f881f7f654d732e4da52c98d7e1f0ec331df","sha256":"7d036d86d47be9ea74287188578cfedf2e6ea83f7fde0d6a2888ebb41d363bd4","sha512":"de529f372330e7f1b15e2a9966c1eb5c1a2fde6d3a97cdf6d14d0458ab5af96e9aa4b00b4b4c794ec8424ff7069e36ed1f1fb2d00213284c8d6aed31f27fe46f","ssdeep":"","tlshash":"4e21577c15df1064911b763d9b7b02cca86006273b89c692f81d81847f625b210ae7f8","size":1273,"data":"","first_seen":"2026-02-02T12:25:22.406256Z","last_seen":"2026-02-02T12:25:22.406256Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"05fe3731173520114376c91f4ca82981","sha1":"3bbb72255ed43889802f411f821f96bdb23a5a9e","sha256":"0fbbfef4fad961b8cafa17ea3cb1a690a707c0df4c64f6c4f4f6655952e94878","sha512":"9eabb446a9bb304148cb526314ec48d52e214d23b314cf2190b5ffb43a232ba38fe772127a54010cf1416bce68c5ec499e1835da2480b0fd7eec671a4dd0dce1","ssdeep":"","tlshash":"fbd097e8b3c082cc0e872dc3312b105ca08f0f342e302d94080126a3288afbf62e411a","size":262,"data":"","first_seen":"2026-02-02T12:25:22.40758Z","last_seen":"2026-02-02T12:25:22.40758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.15.10/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06735c25fbbc8c9a6bd1aeff7a41cf7d","sha1":"4d3a92c8860c6d5ff05ef300f1178ae4f2934561","sha256":"03d7a0eb6caf584e5500dcfe206c4156c47b37d11666646c470686751f7abc07","sha512":"296650a3612250c98432b8c951466858ff24fe62f9ecbe4f3e3405db756fefb8c689d40af163ec5ff46843bb88d1c9e30c3094f195dad4d1b6e0790b3aa23db2","ssdeep":"1536:hwh1lEMPLGYL0DNKUc/lyxeq9XXnfbSUO:QlVLGpDNtc/lye8fm","tlshash":"f7630a522a04f033b6fb45af64e0e204b5a95515fca74c54f42cc9804febd4f26b7aba","size":72231,"data":"","first_seen":"2025-01-04T11:33:43.996079Z","last_seen":"2026-04-13T02:48:37.486605Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"3e9f4176da0f82db1904ee4ae0b0e3cd","sha1":"cf3f6b720b940c7e64b8f034029c6ec28c798abe","sha256":"3b21c7ebd6cd17f0122e3dd4da17ca8e83f642ed8b029eb838be1ee76760c2bb","sha512":"6b372961c82e9e8e75dcad22f9627dd462a1b3a748505a4eb4d63497206d9838bd4cc7cc587c60494bae99554ea369facd1f3bf6218644a7dae0df6d814acd37","ssdeep":"","tlshash":"4570000cc000000300000030f000c00000003c0cc000000000330000c0000300030cf0","size":21,"data":"","first_seen":"2025-06-12T15:03:07.700812Z","last_seen":"2026-04-11T12:19:24.571158Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?ef9b6b44ab1f560280ab7cfc47cc6e7a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3790d46fe38ad69ab4a312d51b83b37","sha1":"faf96c1abc31a367dfb4da63afb8ec766661dcc1","sha256":"77a7b9089c1e0bfaef4c85aa707112e763968c392f4494aae382c5d3a8f91ec1","sha512":"e052d1f939696d74960cab95e2e4d4dce6500259d91532f701b53c13289e61a28592e37993ee0241a996eb98ddc60713e36b70b18cfc6f1afd405523e3f98381","ssdeep":"384:omVJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:omV4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"01d2d9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","size":29905,"data":"","first_seen":"2026-02-02T12:25:22.398264Z","last_seen":"2026-02-02T12:25:22.398264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M6PBM3QQDB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f5d3cc09ce61af69537327ce12a6182","sha1":"e91fbe36bb5146d4a0f08618d57b323843712047","sha256":"265e7de9df10c308ff61fe33cadf5580d4cd61c01ee02c4b139a11b697202531","sha512":"db9667f9484ea210e3e2117bdb9762726ed08539bf7bbba2ebc5615b5d1b2c5a35ea9c7172ff91993b59e7843e58fa82d8554fb23653235dbd0751bf9209d94f","ssdeep":"6144:V/a2dvzR1IWaoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:UUv1iWaoCsx2/Gu+yz6h833w+d","tlshash":"7b9419ce73c674269396e478503f018ba57b29a2f45dc89af189cce41e34a9a4137f7c","size":436381,"data":"","first_seen":"2026-02-02T12:25:22.374923Z","last_seen":"2026-02-02T14:08:26.64772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"894fb7e7b38e110bd0019dbc9b8d7ed4","sha1":"807cf8736af9481dcc6b52123b745e18d498140e","sha256":"d9f2ec20e3302905e28d6abc5a5f2fd747a96a92034e18a2cda74afe0d5cc348","sha512":"9ea1e377bf48fcf24fef02ca36ccf7b2de1603121ae429dea8d7520bf490cd7f56b60f8063bc77ab902f97541a665858441db135af06927e933354febb328bac","ssdeep":"","tlshash":"e5f06968915d23a4d50f7755eb0a92dcc83188723fc2da65f40880823f270f9a19ebe9","size":638,"data":"","first_seen":"2026-02-02T12:25:22.410788Z","last_seen":"2026-02-02T12:25:22.410788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.cc/npm/base64@1.3.0/base64.min.js","fqdn":"cdn.jsdelivr.cc","domain":"jsdelivr.cc","tld":"cc"},"ip":{"addr":"172.67.202.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3b168f040615fa951c17c1f6e4dafe6","sha1":"8fb7686a87eb38db97a4d240adfde1d0ea58b9b6","sha256":"a3d0a4d7944393bbdf0622bc75b9d3a7cb0199fba2ce7872e9e9e44e6829f09f","sha512":"45084bce611e25aa56d333ae70f60f9ecbf3e2f1e989c35d02f3479a5a6c702a471bee27f1fe02594e1ee9e07689a5b73ad6cfd57cfa51a7ab68629f158fb845","ssdeep":"96:CL+3kGa4fya8XLpyxub1LFmWjMIQiJakH/2V07x7j2jY5fxTfkl1Y:Caad4ubpFmWgiJakH/s07x7CjYdxiY","tlshash":"0ba1018cb593b04547e3b161265f404ffa7eaaa9394f4160ca21dde83cb818bc077f69","size":4979,"data":"","first_seen":"2023-09-09T22:19:36Z","last_seen":"2026-04-11T12:19:24.568858Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.res.wiki/e74380251162/static/js/v4g/main.js?_v=1.4\u0026_t=1770035096","fqdn":"cdn.res.wiki","domain":"res.wiki","tld":"wiki"},"ip":{"addr":"104.21.54.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da7bd194952902b98c999bfbfc30f803","sha1":"34a0aa856a87774b28b3920887cf5eb49e445017","sha256":"0be2ad61a1b0ce931e5624d14f3ef424fb99897c984b5b540b446c6961b5b4a9","sha512":"9686f676bbcf3aa7616624ca5d3a4d626804c33ae317b677a388eeb0eaa8e5b5e4c4b5274aebca9136ba317b73fd2b1e6ae95aedf24746f741b719fc0922f53c","ssdeep":"1536:LSSU0Epew48Y7mRqpxmU+mUjmfcCR6F4oithYlg5hGbZU:9fEBemRqpxmU+mUjmfcCMCYQhGK","tlshash":"f243a466a120e6fe4311dd2caf6cd55c90a1c9c5c2a1a8c25edffc0eed59c91443daec","size":60425,"data":"","first_seen":"2025-12-21T20:38:38.719127Z","last_seen":"2026-04-11T12:19:24.562856Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c87d5a63bb335738e270a0a6e2fa21f","sha1":"850d5e3a59de05543ab16146beba0d4b8cdb0694","sha256":"f26811a04ee9f104632fcec68bbafba697a8b2633efcbdab1747b18bc8bbe362","sha512":"c2939621522518f22a5047cb679ba01ae1739d56d98a0913b40536581b3a804e63b3d62ae55f007dd277ca9370f0185d4acf2c5d55f3e82bc899e29f4452b0b5","ssdeep":"1536:VaZHvF8tUsoAdEYEQzbu5FcQhSbdhyM8V34i8yTW6fvcMdfANTf9yb9gGXp6au4:G///3","tlshash":"de433a215398047ba42786e0f7fc128d3578424ad6ca075cf3b7472ab1a9cee14a77f9","size":56985,"data":"","first_seen":"2025-12-21T20:38:38.732823Z","last_seen":"2026-04-11T12:19:24.573793Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EN6M90G8S5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b74350579938ef1c91c7592d830ac4c","sha1":"2298d2e73f7221c60e884e113a333e96246c7657","sha256":"1aaf2becd458935d76d53d3a53ae4953503714d0951fa7b30457f2ab97b20d31","sha512":"3c301a1e46e672cc2eeb13f5f30a8186cac84e0dadc0d951b866fa725a030a651792c0a60b0568a030d50b3e2422da882059186a28b58d3a09c6eb13204172cc","ssdeep":"6144:T9a2dvzR1IWaoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:YUv1iWaoCsx2/Gu+yz6h833w+d","tlshash":"c9941ace73c674269396e478503f018ba57b29a2f44dc89af189cce42d74a9a4137f7c","size":436381,"data":"","first_seen":"2026-02-02T12:25:22.396807Z","last_seen":"2026-02-02T12:25:22.396807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7b87ebb01108138f4a5652eb0f07735a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"12f4d7c24e770e6fed1ff92e29b43a50","sha1":"202a9dc0f40948ef7eebff2486ac55e3fe4be44f","sha256":"71aa03da78577ea313d5a98190c79eaf84e9ef61e741a5bec7dd9c2d38e869d1","sha512":"3f820e077e0c9c641ceb0c198941f888d8968a1f267099bae13d34191ac676c0011c1e5460ce058c42d7e6e023b32e33492530b0874e6abf49e4dc8a91872c27","ssdeep":"384:LjJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:Lj4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"32d2d9e9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29904,"data":"","first_seen":"2026-02-02T12:25:22.391625Z","last_seen":"2026-02-02T12:25:22.391625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?123a9a35a9e4c5061682375adb75a7b9","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"313afef3faaa798a86251082020d44d5","sha1":"de3a14021939a4f093fad17b1271e18a8f894df9","sha256":"19d8fb30c143c5308a584a2be743ed4232c57887dd0db4409fdf7764d2f36cc9","sha512":"a3d50f64128097fa0f3aea4833173b3ba2a17b315fa8650be62108c6509e3752a3446ebac3ad322443b384d6cad7c6f099334e848425d5d310e060cc8e964b00","ssdeep":"384:M6gJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:M6g4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"79d2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29895,"data":"","first_seen":"2026-02-02T12:25:22.386258Z","last_seen":"2026-02-02T12:25:22.386258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5db5b4f4073dd3b92b0d0eb2cd417940","sha1":"1caf09022631606e1f0c7903821b26889fd34816","sha256":"0d039ed5518d1a2978533012b2922f307c9ac8fcbc9d28cbfebbab7ae1fe0255","sha512":"edc7572110f91bb7e9d00fea79203a1587fa94671797b4d40ee56ce94360851f6e47c2e74095afb26079d475381383e1ee7c25f53c6b5ec0b4eafb3532b60a31","ssdeep":"","tlshash":"14d095e931c145cc0dc31cc57c9b1568b17f0f341b155d50080314433847a775194117","size":262,"data":"","first_seen":"2026-02-02T12:25:22.412607Z","last_seen":"2026-02-02T12:25:22.412607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/bee/utils.js","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f502fb4b4caea7cdbee613b5c5c7f386","sha1":"0959cf9520724de739678f1a00a8c95bb1673c92","sha256":"f31750c617827aa1736c3c290dd80056e2a3e368c39864bf9e2480d503050116","sha512":"2e835ab9f5e1a03bbd0511026bc0fbd6005bf0555de11a47c84303ef855b0f4873e9698fdad5b5e3eca6b18fb1a4410548bd231c9c7b3b184913b4720ef74670","ssdeep":"96:YAMgrI1/PuTIH37rjYF7+WAtZeR02bXYLZhhN4Rk:YpR537W+DAR02jYLZpf","tlshash":"7f911d82eae11c284776889a0c9f3856f178db035c0ca900ba6f94e664d4efb51674be","size":4531,"data":"","first_seen":"2025-12-21T09:29:00.57479Z","last_seen":"2026-04-11T12:19:24.548936Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/my4gs/api/d.php","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89511745f3900bf1ad4da65d81cbc8a6","sha1":"75f9e955b49537f8888422693ce8af1b46e34199","sha256":"0b9e8cac58144090cf22ea4c0bc6dad9272d11625a730ba3fcbb79e19a87168f","sha512":"cc1b9683ea757ba210b77a77d5d05f348f9160b4c68e7e604dad235d77d578c289725b877d46886e01add84e50d60e056eaef3b84b4caae6265d8d65a76773f3","ssdeep":"192:kXgR6XHoymxXNWXHoXGAp3ZeG0xy79s00pkoeXydmUa4:kXgRSoySAo7ZeFytXydmq","tlshash":"5be13bb83345e3f883e4375359affb8b547528a8f902714a755cb1e45bf2c92a142c98","size":6805,"data":"","first_seen":"2026-02-02T12:25:22.379714Z","last_seen":"2026-02-02T12:25:22.379714Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7b87ebb01108138f4a5652eb0f07735a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"07f6bb9c89a555332423b877c1ff095d","sha1":"bf1beb023242125035459701a024217ceffca05b","sha256":"6d3544e71dd0d44ffaaca06ce5dc30b44c35df0065e2ea65754a119c03ac4539","sha512":"387fc8f937dc35f63a29ff54da41ef32f88a2884bc14a76013a3e8e0592c31362ec77f0cc34a110bb211721b7ff6e8d33adbe38f5d19437deccfb0ffc8685c72","ssdeep":"384:L7JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:L74VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"e4d2c9a9b282713293a324a5153f724ef07b5a54bd4968a4f11894c07d38fbb027bfdd","size":29904,"data":"","first_seen":"2026-02-02T12:25:22.401628Z","last_seen":"2026-02-02T12:25:22.401628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c5c9160600df2d96d69a4ea16cec7ed","sha1":"3cf678c9135cc952ba6970ef545035bb757a443f","sha256":"a3520fe88e248d2b6c9c6db93309a037ef969fe297208e5bd7e49a55bb32c808","sha512":"2a298a8c2552c6a6c6f8d3f7327d2e9abfa87a0dbb27e9e528a8539b416155c0860f54f46464dfe7e5d49c7906a9eacdac7e5181b86ef15a83276a8f4fee0546","ssdeep":"","tlshash":"078004d531c35040475331d400571cd4503444f014444d544040d4511c55030d1154dc","size":37,"data":"","first_seen":"2023-04-11T21:49:14Z","last_seen":"2026-04-14T22:53:50.292314Z","times_seen":105238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"324652e2506950a90089c2d75ba1274a","sha1":"dc033b12a48f71be8fa6fbb58f14d109a4e75e5e","sha256":"92202d47cdac635d692cd922e0c34c41fc2e6ccf5097976922a1f13d5faff7c3","sha512":"14846bf6b0886b8a714fc26140d041d4227748388df02e1cb9bd8e7c001708c9e045d5ae56c39537b72b754020b77a11b04d7690d441ddb6707a87797a332579","ssdeep":"","tlshash":"e3d097dc31c246cd4ea72cc279ab1128606e1f362ba86a4149222453388adb7765846a","size":262,"data":"","first_seen":"2026-02-02T12:25:22.413828Z","last_seen":"2026-02-02T12:25:22.413828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"8776f01ab0df7ff820ee319cacc2ee89","sha1":"c9db850d51326d5450821967350cfa8b269aee95","sha256":"60cf3f41f53e3d96ab2e421b8d56549755fac8085bc8a4fbd98364d2b49180d8","sha512":"aa2d8751f81c51a862bc426af8fa20b8fdacd6f4419e1ac5cb3e6ef270e6c4ea76e01b235592591138e7d4e2ae06a32daa2573a1825f1180f213ee7990721c50","ssdeep":"96:Fsu7wdxS8d2U8FHiQZOFjoJbsUV9HG5FRW62G5wblffAs+0c03BFmDdxSsP0V9Hz:2/S8MUXQMXh29IsZc2E/SsP0V9Hz","tlshash":"3fe12fd2b585298545c387de88b9d64488b4f49e92227cdc73c69cc4dae9ff8b00b332","size":7167,"data":"","first_seen":"2026-02-02T12:25:22.415022Z","last_seen":"2026-02-02T12:25:22.415022Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"xuatj.cn/res/pt.html","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /res/pt.html HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: my4gs-lod=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:24:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4cYpzoE9UkjPJPw7K3ccC4Uf0qtg4ypKUb3zRliC8qWZfxJrIL27ORvCP%2FXj3Cqf8jPzYnuKb3BgHed%2FMuo3451r8theuvs\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c79ab27de98723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":1937,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"8acb72251a359cfa45b5e1d3c3e34d85","sha1":"3ba27d57be249afe13e46732611e162782f38e9c","sha256":"e92433fe688b1fa919e63f2d15cc716135cf3bcca83876586e6c6b87b4ae13b0","sha512":"48f57a9240ad64f64f5d7596fbca864748dfd631a7747bcdf631e1bc0fe18f637f6a565e76734008aa61ce012c516c617073e66f186c78e7d6c9449cbbbfe8d9","ssdeep":"","tlshash":"d0419b9b6c57a8b167e70569637fe50cf1e2a50ea166e401b4dde0044f50fe30d2df88","first_seen":"2026-02-02T12:08:32.347552Z","last_seen":"2026-02-02T12:25:22.371425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M6PBM3QQDB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-M6PBM3QQDB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Feb 2026 12:24:59 GMT\r\nexpires: Mon, 02 Feb 2026 12:24:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144601\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436381,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"2f5d3cc09ce61af69537327ce12a6182","sha1":"e91fbe36bb5146d4a0f08618d57b323843712047","sha256":"265e7de9df10c308ff61fe33cadf5580d4cd61c01ee02c4b139a11b697202531","sha512":"db9667f9484ea210e3e2117bdb9762726ed08539bf7bbba2ebc5615b5d1b2c5a35ea9c7172ff91993b59e7843e58fa82d8554fb23653235dbd0751bf9209d94f","ssdeep":"6144:V/a2dvzR1IWaoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:UUv1iWaoCsx2/Gu+yz6h833w+d","tlshash":"7b9419ce73c674269396e478503f018ba57b29a2f45dc89af189cce41e34a9a4137f7c","first_seen":"2026-02-02T12:25:22.374923Z","last_seen":"2026-02-02T14:08:26.64772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":129,"dns":1,"connect":21,"send":0,"wait":33,"receive":17,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/g23-en-no-ava-14.css","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /g23-en-no-ava-14.css HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:24:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLeUXMcOmtsCNOgSpNYmyl51CrNccF5%2BvRs%2F2sLzXZUqLUbWB6H0StoqyKQ221YRMZ4uaKltamWDWkpP3e3qj3d1rZ24Lieb\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 02 Feb 2026 12:24:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c79ab1a1d4a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9556,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (9556), with no line terminators","md5":"120dbc21170db611983942b8e63c5347","sha1":"728cb953be5f1c8ef9956a17ca72623f8957561a","sha256":"98e201bfd8e83b93ec3457483c0b62b4a75f6d06575a16d1be5c481fc19ad274","sha512":"025945d955512a189da9dd02b3ff22ec8ad8c3a20391b354ffa2759baaf78b2dd015b06dcf45602541120dc3af1519d1bf5ca5a0324fc6349311c97be8274863","ssdeep":"192:/oLo/5qFNuMO73XhZCe2WdMYJm8lJOk7gIso99FLImnzEnGZe8fz:/ocqFtI3XWe2EMGfH7gMlLfEEe87","tlshash":"ed125c65ec49861349a01c903f59c9c7641176fdd74eb5ed0b82ce75fb24f22833e185","first_seen":"2026-02-02T12:25:22.377421Z","last_seen":"2026-02-02T12:25:22.377421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/my4gs/api/d.php","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /my4gs/api/d.php HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: my4gs-lod=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSHU235bQ7GPxN6YURVAVbDJPtSMC3Y6jklqER4OwU2Hq6OHeQHPtViqULzDqOEUVj36GnJtK7e6pYNgBMbe4vzQN%2F9fQlgR\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c79ab1c1d8d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6805,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4421)","md5":"89511745f3900bf1ad4da65d81cbc8a6","sha1":"75f9e955b49537f8888422693ce8af1b46e34199","sha256":"0b9e8cac58144090cf22ea4c0bc6dad9272d11625a730ba3fcbb79e19a87168f","sha512":"cc1b9683ea757ba210b77a77d5d05f348f9160b4c68e7e604dad235d77d578c289725b877d46886e01add84e50d60e056eaef3b84b4caae6265d8d65a76773f3","ssdeep":"192:kXgR6XHoymxXNWXHoXGAp3ZeG0xy79s00pkoeXydmUa4:kXgRSoySAo7ZeFytXydmq","tlshash":"5be13bb83345e3f883e4375359affb8b547528a8f902714a755cb1e45bf2c92a142c98","first_seen":"2026-02-02T12:25:22.379714Z","last_seen":"2026-02-02T12:25:22.379714Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/85.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/85.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AOCedOEmxzMSLawCFuQl1dGM248uaOgoZE7zDmT7jMOVp0MYr83p1Txd1A9CBPpzLgYwCIiht3RI22s\r\nexpires: Mon, 02 Feb 2026 12:42:11 GMT\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 03 Dec 2025 15:05:48 GMT\r\netag: \"fe18157cc1837ac191f40b260801ffbc\"\r\nx-goog-generation: 1764774348472342\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 6484\r\nx-goog-hash: crc32c=f6mMoA==, md5=/hgVfMGDesGR9AsmCAH/vA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 6484\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 2566\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTyxbHrUG486jPCLn%2FMZ%2FEhB3tfT8cIDgFCXTW7UzLnD3SDu3ogITRMy6Zhwy10aTEeVM%2Fwf3MHMjMYz7l7sTFP%2FZ6yO90w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79ab24ffc7b4eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6484,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 128x128, components 3","md5":"fe18157cc1837ac191f40b260801ffbc","sha1":"7e87c54b83dc889827ca1008f6ff17c8b160c8eb","sha256":"a048caa9596581a7d395646aae706fc8c6533b7a9b9f9cabb871abeb8ae69aac","sha512":"656ed9d4be6cd9ac2be8f39e7e2638f7aacb5efc3e2f8fdedcad0d28c4040cd7ec2682897c573f131b9e9593d6fc36a496c22366582f42104ab4d33add496047","ssdeep":"192:kqULSdTFz0h3fAaqk3VfdrUwFDiN1UhXzwk:+Eo9IaFZnzwk","tlshash":"cad19e2bcca30fa1ed88db227576586d5952034cae80f90e54fcd018c823db85d461de","first_seen":"2025-12-03T22:33:40.851298Z","last_seen":"2026-04-11T12:19:24.543017Z","times_seen":25,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/91.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/91.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AOCedOHpGXEAqAeJ4CgXnACTTZ3RFjXIOj4NlA-L-kGgR_iWLDLeCII-sk6-VXF-NkMPjiI\r\nexpires: Mon, 02 Feb 2026 13:11:48 GMT\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 03 Dec 2025 15:05:48 GMT\r\netag: \"cea4e73543d7d1654d73236fe78e91bd\"\r\nx-goog-generation: 1764774348694166\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7405\r\nx-goog-hash: crc32c=qxKqQQ==, md5=zqTnNUPX0WVNcyNv546RvQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7405\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 789\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0FK6BWUi%2FVA6gf7y2pwf%2F%2F3NGUZKOZ3qQOM4g7j9qGyRihxmh4zhs3QZVRZc5am32qq7WZsh4OfKD5FqDzxfZcL%2Bn2IFGI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79ab24ffc9b4eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7405,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 128x128, components 3","md5":"cea4e73543d7d1654d73236fe78e91bd","sha1":"e4b6c5861ccc88e954aac6bb2bd47186351132b8","sha256":"303d932a98f420c8c668b5d3e62d5d55443c628f4d1bd3498ba21fb992b0908e","sha512":"ba119520ec42d38b05d0c3e7df1d376437d280965a240c14709b0c661e920844bbc1116099fc5109a4cadfb17fdd3e669c43930621ea30a19c91385d487b75fc","ssdeep":"192:iSIbWwV+9o0mCfTEcQgXv/SJcOKtUqJpO:rIkfjfKJnKtUqJ0","tlshash":"aae18d7c5a056f848228fdfa10f9d79a02e158a45858f1ad4cf33a2389910f8fe1d1fe","first_seen":"2025-12-03T22:33:40.867602Z","last_seen":"2026-04-11T12:19:24.546667Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?123a9a35a9e4c5061682375adb75a7b9","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?123a9a35a9e4c5061682375adb75a7b9 HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11289\r\nContent-Type: application/javascript\r\nDate: Mon, 02 Feb 2026 12:25:00 GMT\r\nEtag: 5ed4114a708325fe81bdecde655a6d37\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=58496350A672D466; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29895,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (619)","md5":"313afef3faaa798a86251082020d44d5","sha1":"de3a14021939a4f093fad17b1271e18a8f894df9","sha256":"19d8fb30c143c5308a584a2be743ed4232c57887dd0db4409fdf7764d2f36cc9","sha512":"a3d50f64128097fa0f3aea4833173b3ba2a17b315fa8650be62108c6509e3752a3446ebac3ad322443b384d6cad7c6f099334e848425d5d310e060cc8e964b00","ssdeep":"384:M6gJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:M6g4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"79d2d9e9b282713293a324a5153f324af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-02T12:25:22.386258Z","last_seen":"2026-02-02T12:25:22.386258Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2674,"timings":{"blocked":901,"dns":280,"connect":206,"send":0,"wait":866,"receive":1,"ssl":415},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T12:24:55.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /avaa8tXBxnRt4fmguangme7e91c1f52d4 HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:24:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjhPA9ZMkqD4vVTd%2BfYMI7FNBJJjdckb3%2B2Ct6EjKY9owp4DyLBmzhrtZ%2FkUApRKmTOqunH%2BSn9azxl0k5rGV43%2FN%2BAgdg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c79ab15feda0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2973,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (655)","md5":"8c0b4fbc63e039d09fa52f9a7e0fb867","sha1":"ee2565bdb0ead7807470610758193f6b7c118b22","sha256":"07a4f637ef3a04847d3f83709c4886d0f5c2fa3ed366c8e6ce57762b02c2d51a","sha512":"d558d6c53872c7992a7b6a364d264010db05be10399122376c9bbb0157bafbcb69e1c2fc4cda37c3747dbcbba48b0c88c7852c4a93245d1c318a9b78e3d891e7","ssdeep":"","tlshash":"74510c3900ae1258901f7268eb6aa2cc987149333fc6c981f85c91857f635f644efbf8","first_seen":"2026-02-02T12:25:22.388082Z","last_seen":"2026-02-02T12:25:22.388082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":707,"timings":{"blocked":204,"dns":186,"connect":1,"send":0,"wait":294,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/96.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/96.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AOCedOGP-iDKAJCKu37Yd0IOHg6r_ckeNzQvEPcsmIaLXYxJgy_ydtfKVAwNddQwksUreoc3NP1bnZ4\r\nexpires: Mon, 02 Feb 2026 13:11:48 GMT\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 03 Dec 2025 15:05:49 GMT\r\netag: \"305062790def54fe125a07d87208753a\"\r\nx-goog-generation: 1764774349264704\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7962\r\nx-goog-hash: crc32c=ZP8HWA==, md5=MFBieQ3vVP4SWgfYcgh1Og==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7962\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 789\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIRPn2zuFSEjS0CXJojtktH7s6KAbzce9jzth92dzqen4dBm0QyCpuOHZs83J3WkJOMW16r%2FZOxLdUgD%2BM%2BfnxHLAmwVoOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79ab24ffcab4eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":7962,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 128x128, components 3","md5":"305062790def54fe125a07d87208753a","sha1":"5d43864d896a44ee5a7316d919e1323262de7a45","sha256":"9be61a17a00f0c04a9205a44aa8e827ce3ed46ed7a57c49d1f88576b27e4c546","sha512":"93198d3e8a351016aee19b49d045e29cb7f2e64e0f1b506bde5d43beddf7d0c5f2982d167402494b6a725bdf52eb257c79754d67d682ccde4d0f6f1198536a54","ssdeep":"96:32HQDBdwWhZH9Mh3MvSUIKb0tGuk97IEyAnlnxRakCU88CGxSv0I/XOtZxmSZjO/:sQDBthJIRREyErhrr8R/XOtfbl4r","tlshash":"d6f17d2fb5b26bc2d15534b53774196303486f8168f777f0a8f291b618700f920aa1fd","first_seen":"2025-12-03T22:33:40.87267Z","last_seen":"2026-04-11T12:19:24.555919Z","times_seen":25,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/myyy4g.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/myyy4g.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:24:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62273\r\nx-guploader-uploadid: AJRbA5W8uWbFaoJQR56qY1QQwDQzsGq1nWGBC8W2YNF5AHJZ6f48QZohYz5Z1rM1iGn5bqst\r\nx-goog-generation: 1755517615141434\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 62273\r\nx-goog-hash: crc32c=ueYfog==, md5=93qkk3GWC9I0NRmVc9Tdtw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nexpires: Mon, 02 Feb 2026 13:08:04 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 18 Aug 2025 11:46:55 GMT\r\netag: \"f77aa49371960bd23435199573d4ddb7\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1012\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y6HCFWRPzuPcwNlQEhWKoFbpDnDG4p8Ib1uWtM5MTWMxWLHTMIJELmbU%2Bo3X%2BcQ%2BHXgdozIAy8XVdcR1zOiCg5pu6uipQrE%3D\"}]}\r\ncf-ray: 9c79ab191f72b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":62273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x288, components 3","md5":"f77aa49371960bd23435199573d4ddb7","sha1":"b7c867ac93e9157c0a772fb19231e68c68f0dc91","sha256":"d94b195930851ac012cc261b828a32fd2c8c46c1755b22daa460a6eb65b407f6","sha512":"3264de4e3f7d2ead1fc8183722aad58f22bf4f950ce00d73c4d049a8b76b67322b0187654c31872fa65ea0e30376cb6200f9c04997ac2a1a3834ccd800283f62","ssdeep":"1536:5znPapURnRYW+shsvF0U3VSAnNnkwfzHB7w1f+7d:9S+RnS3qsFRYyNfrR2f+d","tlshash":"c753e1b0af895216fd4991b4d78559b1dcd344222981eaf38c3e9d42e28f770d0eb9e3","first_seen":"2026-02-02T12:08:32.35239Z","last_seen":"2026-02-02T12:25:22.390498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":31,"dns":10,"connect":3,"send":0,"wait":14,"receive":6,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7b87ebb01108138f4a5652eb0f07735a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?7b87ebb01108138f4a5652eb0f07735a HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11298\r\nContent-Type: application/javascript\r\nDate: Mon, 02 Feb 2026 12:25:00 GMT\r\nEtag: 85b5b7a51a51a8aa27bb4623e089f67f\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=F5B18B1F558C53C0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (628)","md5":"12f4d7c24e770e6fed1ff92e29b43a50","sha1":"202a9dc0f40948ef7eebff2486ac55e3fe4be44f","sha256":"71aa03da78577ea313d5a98190c79eaf84e9ef61e741a5bec7dd9c2d38e869d1","sha512":"3f820e077e0c9c641ceb0c198941f888d8968a1f267099bae13d34191ac676c0011c1e5460ce058c42d7e6e023b32e33492530b0874e6abf49e4dc8a91872c27","ssdeep":"384:LjJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:Lj4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"32d2d9e9b282713293a324a5153f724af07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-02T12:25:22.391625Z","last_seen":"2026-02-02T12:25:22.391625Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2096,"timings":{"blocked":912,"dns":279,"connect":210,"send":0,"wait":267,"receive":1,"ssl":421},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"u.jsdelivr.me/res/loading/c.svg","fqdn":"u.jsdelivr.me","domain":"jsdelivr.me","tld":"me"},"ip":{"addr":"172.67.222.251","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 04:15:03 GMT","end":"Sat, 07 Mar 2026 05:12:22 GMT"},"fingerprint":{"sha1":"61:51:50:A5:79:1B:23:4F:D9:7D:85:28:2B:0F:35:B4:8C:FB:E1:BF","sha256":"3E:66:72:56:5A:36:46:85:B1:A6:E1:3C:B2:DF:90:D8:CC:E7:E3:5F:A4:7E:0B:9C:3C:E8:79:1B:D8:46:B5:DD"}}},"request":{"raw":"GET /res/loading/c.svg HTTP/1.1\r\nHost: u.jsdelivr.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:24:56 GMT\r\ncontent-type: image/svg+xml\r\nx-guploader-uploadid: AOCedOH4JH_B6jc7uPGwAcTzuDobymtoDnhBDf0ufk4fq7U8fgTjVXtWWrxbtnjeoNmDM3lK\r\nexpires: Mon, 02 Feb 2026 13:08:04 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Jan 2025 07:28:39 GMT\r\nvary: accept-encoding\r\nx-goog-generation: 1735802919707269\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9717\r\nx-goog-hash: crc32c=yzDN6A==, md5=n1Sk/OA+6ujVbDdjOwToow==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qniEeN0Op%2BkfJ3zHSvPR5HETIBEo4HrBXCgvKOSZZcSyvlrQETwfKn%2F1r3wF3iuTu7OiUba06K%2BCeBa%2B%2FSmZCEShecobIlniajJUtek%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1012\r\ncf-cache-status: HIT\r\netag: W/\"9f54a4fce03eeae8d56c37633b04e8a3\"\r\ncontent-encoding: br\r\ncf-ray: 9c79ab192efd5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9717,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f54a4fce03eeae8d56c37633b04e8a3","sha1":"70740bf9c2dc9f2f28d0f652fe581c1b33ad61d1","sha256":"daf02acf014a4918dd680bf01a60265d34caa40f40548aa2749d62b0be0d578e","sha512":"d7c194685c9a71079a41a07da97d1a5e202b4c29f786bfb17637a68ff2bfd7338132407619740407d3baf439bc87ee65dfde878fa315ef0d90b7292d0c645ebf","ssdeep":"192:zXOlFK90H3JP6y9W8M9r2Jolbors916qMUcRVYXe:zXl2H3t6y9Jo2JolErs916ZyO","tlshash":"191200c7ae420cad4a82ca0c83d35f6c16f8f61783974cef33a8155ef50d6ac16b556a","first_seen":"2025-06-29T12:59:13.039898Z","last_seen":"2026-04-11T12:19:24.53539Z","times_seen":90,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":34,"dns":6,"connect":1,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.15.10/dist/sweetalert2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11.15.10/dist/sweetalert2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.15.10\r\nx-jsd-version-type: version\r\netag: W/\"5d8d-vVRg8wMaAlGOIHX1ACr/kcidmq0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 02 Feb 2026 12:24:57 GMT\r\nage: 1476202\r\nx-served-by: cache-fra-etou8220188-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4294\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23949,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23948)","md5":"9588fcabb1fd1470c7f86e9bc6a6c9f3","sha1":"bd5460f3031a02518e2075f5002aff91c89d9aad","sha256":"ba06da122b695523200a99cf7bb9baf4ec8be8ce3b2a47c4dfa39d4634170f6f","sha512":"39ffb253b1e5205a9741c1bc52c75debb7a3001cf6ee8ec2441d6d242bf319885375d0a2e1364b56187db466890b096b062a1d582cc0c7e8a0a3da1a35b524e4","ssdeep":"192:aFJpz/m3oxsBodX/TULZDcsPEtmFHg+0c3ep2DsLAB5QIN/hN:EfThszFAsPEtm6m3M2D3QIN//","tlshash":"12b2d9a1aa88e157f66a822f19c0e60875dee50bfdf3085df510d1408fd7e1f3a792a4","first_seen":"2025-01-21T22:40:57.041358Z","last_seen":"2026-04-11T12:19:24.561331Z","times_seen":58,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":41,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/84.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/84.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AOCedOGiT28VzGkg54nszfn1RqJl4LknFb7a2oDIJcMs787DPlS2rCMFL-pTfgN2SWoJAj7zsv2Keq8\r\nexpires: Mon, 02 Feb 2026 12:32:42 GMT\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 03 Dec 2025 15:05:46 GMT\r\netag: \"b379d54a6db4abab5f62ad20c59254e5\"\r\nx-goog-generation: 1764774346753525\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 8674\r\nx-goog-hash: crc32c=gtVx7g==, md5=s3nVSm20q6tfYq0gxZJU5Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 8674\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 3135\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLXQV1ptJN%2FxXVq371svZ8beC4SpXtCRDxCcrwdK0VSlwwqgDn57wV7wR%2B7mf7QxgOynnMCs07z9aAQ8mdlVW4WggtQIYVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79ab24ffc6b4eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8674,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 128x128, components 3","md5":"b379d54a6db4abab5f62ad20c59254e5","sha1":"bb05aeb90e15e76a4c99ddbc41432830e81065a2","sha256":"f677332bb94ed878e2fb67568e60f37a185a71c7b6131467076f05e801156b41","sha512":"a37dded295979fdce9bfa73e165b12515b50e08d660b71eebcece7edd4af0f2a3925362e240955a413238abdcec916e4170c239ff655cc48f172f619f7e8de16","ssdeep":"192:E14yqFdGuryQJoDuIMRn+2K1TXsKecVnP0Bb:E1AdfIBMR+24VeW0Bb","tlshash":"ca02aeaa655a7383e8c09f3835ff7627161e4b0158871036fcfec0726b821e209918ef","first_seen":"2025-12-03T22:33:40.866556Z","last_seen":"2026-04-11T12:19:24.529148Z","times_seen":25,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EN6M90G8S5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-EN6M90G8S5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Feb 2026 12:24:59 GMT\r\nexpires: Mon, 02 Feb 2026 12:24:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144602\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436381,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5b74350579938ef1c91c7592d830ac4c","sha1":"2298d2e73f7221c60e884e113a333e96246c7657","sha256":"1aaf2becd458935d76d53d3a53ae4953503714d0951fa7b30457f2ab97b20d31","sha512":"3c301a1e46e672cc2eeb13f5f30a8186cac84e0dadc0d951b866fa725a030a651792c0a60b0568a030d50b3e2422da882059186a28b58d3a09c6eb13204172cc","ssdeep":"6144:T9a2dvzR1IWaoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:YUv1iWaoCsx2/Gu+yz6h833w+d","tlshash":"c9941ace73c674269396e478503f018ba57b29a2f44dc89af189cce42d74a9a4137f7c","first_seen":"2026-02-02T12:25:22.396807Z","last_seen":"2026-02-02T12:25:22.396807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":117,"dns":0,"connect":9,"send":0,"wait":27,"receive":24,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?ef9b6b44ab1f560280ab7cfc47cc6e7a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?ef9b6b44ab1f560280ab7cfc47cc6e7a HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11299\r\nContent-Type: application/javascript\r\nDate: Mon, 02 Feb 2026 12:25:00 GMT\r\nEtag: 2e96bd959b5c9115a1d81b5b0353763d\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=496C3366F6F924F0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (629)","md5":"c3790d46fe38ad69ab4a312d51b83b37","sha1":"faf96c1abc31a367dfb4da63afb8ec766661dcc1","sha256":"77a7b9089c1e0bfaef4c85aa707112e763968c392f4494aae382c5d3a8f91ec1","sha512":"e052d1f939696d74960cab95e2e4d4dce6500259d91532f701b53c13289e61a28592e37993ee0241a996eb98ddc60713e36b70b18cfc6f1afd405523e3f98381","ssdeep":"384:omVJSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:omV4VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"01d2d9a9b282713293a324a5153f324af17b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-02T12:25:22.398264Z","last_seen":"2026-02-02T12:25:22.398264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3318,"timings":{"blocked":1523,"dns":278,"connect":206,"send":0,"wait":267,"receive":1,"ssl":1036},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1628083885\u0026si=123a9a35a9e4c5061682375adb75a7b9\u0026v=1.3.2\u0026lv=1\u0026sn=286\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:25:00.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1628083885\u0026si=123a9a35a9e4c5061682375adb75a7b9\u0026v=1.3.2\u0026lv=1\u0026sn=286\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Mon, 02 Feb 2026 12:25:01 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=9F182B2B05AAF88D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-14T22:53:50.286618Z","times_seen":335040,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1446059009\u0026si=ef9b6b44ab1f560280ab7cfc47cc6e7a\u0026v=1.3.2\u0026lv=1\u0026sn=286\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:25:00.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=1446059009\u0026si=ef9b6b44ab1f560280ab7cfc47cc6e7a\u0026v=1.3.2\u0026lv=1\u0026sn=286\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Mon, 02 Feb 2026 12:25:01 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=26105F31F55C60E8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-14T22:53:50.286618Z","times_seen":335040,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.15.10/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11.15.10/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.15.10\r\nx-jsd-version-type: version\r\netag: W/\"11a27-TTqSyIYMbV/wXvMA8ReK5PKTRWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 02 Feb 2026 12:24:57 GMT\r\nage: 2884663\r\nx-served-by: cache-fra-etou8220054-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 19887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72231,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47960)","md5":"06735c25fbbc8c9a6bd1aeff7a41cf7d","sha1":"4d3a92c8860c6d5ff05ef300f1178ae4f2934561","sha256":"03d7a0eb6caf584e5500dcfe206c4156c47b37d11666646c470686751f7abc07","sha512":"296650a3612250c98432b8c951466858ff24fe62f9ecbe4f3e3405db756fefb8c689d40af163ec5ff46843bb88d1c9e30c3094f195dad4d1b6e0790b3aa23db2","ssdeep":"1536:hwh1lEMPLGYL0DNKUc/lyxeq9XXnfbSUO:QlVLGpDNtc/lye8fm","tlshash":"f7630a522a04f033b6fb45af64e0e204b5a95515fca74c54f42cc9804febd4f26b7aba","first_seen":"2025-01-04T11:33:43.996079Z","last_seen":"2026-04-13T02:48:37.486605Z","times_seen":211,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":60,"dns":3,"connect":26,"send":0,"wait":14,"receive":3,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnmi.com/upload/289.jpg","fqdn":"cdnmi.com","domain":"cdnmi.com","tld":"com"},"ip":{"addr":"172.67.208.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:58.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnmi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 05:13:52 GMT","end":"Thu, 09 Apr 2026 06:11:26 GMT"},"fingerprint":{"sha1":"6E:BC:01:A9:0E:F4:E8:8D:72:9E:47:3C:0C:BF:62:2F:63:0D:E0:84","sha256":"04:77:B4:12:B0:50:DE:C2:D1:07:C3:05:52:B4:CE:42:66:4F:B7:AF:51:C1:B6:37:11:ED:1C:D0:D1:19:A9:1A"}}},"request":{"raw":"GET /upload/289.jpg HTTP/1.1\r\nHost: cdnmi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AOCedOGMT0D4assJ2n1lzInXxdTijQ4cnCfpLAPG4C-65MeReK2SDXslUbgpm0dV4dRz4LaBP8TBve4\r\nexpires: Mon, 02 Feb 2026 12:49:16 GMT\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 03 Dec 2025 15:05:49 GMT\r\netag: \"0f2a409dd3569e3fa8f0d71c8f55c460\"\r\nx-goog-generation: 1764774349932987\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7382\r\nx-goog-hash: crc32c=FpkTjA==, md5=DypAndNWnj+o8Nccj1XEYA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7382\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\nage: 2141\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AI2Cca36pCZgfYH9yTqLiNQhdKOBokTEbzFneuY0QAYsfqI%2Bm3%2BG0Dg4nYJzRMNArJ%2Fhb0s3WVdALztrCPDXIZ7cXfJe%2Bw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c79ab250fcbb4eb-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7382,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 128x128, components 3","md5":"0f2a409dd3569e3fa8f0d71c8f55c460","sha1":"c2ab56b91f582a29db54a0634e778aeb7f5b667a","sha256":"7796f5ecdd4a790f9a2db196f51c1179f3b1fef7f7343f8d9c638f08d4b22958","sha512":"fb7c2be50d29e347d9f787aff176ef9fb8ea4188a9484b79f2baf3242d55c51323c7e19604b97445c819487988d32c3cd251b994c48ad0f51e1ddfe270aa9159","ssdeep":"96:32aaxLIxQXjUP4w/XQ09pH3o/h2RLwTkiVo0YnLFqWELX5a0NwVZ:uLIaXje4mdL4p2RLwYN0YnLFIJaz","tlshash":"0ae19edce2c6534180a1e97b6dbb4028973614c1edfdf59a40fb9429be0a2290c471ce","first_seen":"2025-12-03T22:33:40.868688Z","last_seen":"2026-04-11T12:19:24.531493Z","times_seen":25,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.js?7b87ebb01108138f4a5652eb0f07735a","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"14.215.183.79","port":443,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:24:59.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.js?7b87ebb01108138f4a5652eb0f07735a HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\nContent-Length: 11298\r\nContent-Type: application/javascript\r\nDate: Mon, 02 Feb 2026 12:25:01 GMT\r\nEtag: d83323d6c779bcb65552904555b76b8a\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=66A619702D27FF5E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29904,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (628)","md5":"07f6bb9c89a555332423b877c1ff095d","sha1":"bf1beb023242125035459701a024217ceffca05b","sha256":"6d3544e71dd0d44ffaaca06ce5dc30b44c35df0065e2ea65754a119c03ac4539","sha512":"387fc8f937dc35f63a29ff54da41ef32f88a2884bc14a76013a3e8e0592c31362ec77f0cc34a110bb211721b7ff6e8d33adbe38f5d19437deccfb0ffc8685c72","ssdeep":"384:L7JSoLMJJTRl6s1JXFVCFI/TayvuodsZPIGm8XaR1JRwvutq1tGdc7M04gRw6:L74VJfHgMdvussZPIx82Rwvutcto07v","tlshash":"e4d2c9a9b282713293a324a5153f724ef07b5a54bd4968a4f11894c07d38fbb027bfdd","first_seen":"2026-02-02T12:25:22.401628Z","last_seen":"2026-02-02T12:25:22.401628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3618,"timings":{"blocked":1292,"dns":277,"connect":503,"send":0,"wait":1028,"receive":1,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.cc/npm/base64@1.3.0/base64.min.js","fqdn":"cdn.jsdelivr.cc","domain":"jsdelivr.cc","tld":"cc"},"ip":{"addr":"172.67.202.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 02:30:51 GMT","end":"Sun, 05 Apr 2026 03:29:33 GMT"},"fingerprint":{"sha1":"A0:C3:97:77:4E:8C:FE:D7:EB:17:98:36:32:29:90:3A:D3:3E:1D:A9","sha256":"83:DA:1C:E1:62:00:6A:6B:8D:FF:ED:9A:53:52:54:17:4F:0D:6C:61:0A:15:8A:FA:D9:95:3E:74:F2:FB:7F:62"}}},"request":{"raw":"GET /npm/base64@1.3.0/base64.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:24:56 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AJRbA5VMq9fKjTUI-Xepq445NNb6TT1-RLhuvTZmE2nwEetebDjvvf3Kbl5DtndYToDtUNwzqDH9mWM\r\nx-goog-generation: 1734341713496794\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 4979\r\nx-goog-hash: crc32c=hgPH6Q==, md5=s7Fo8EBhX6lRwXwfbk2v5g==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooWl5GfTLits7OZDaCTqJ3ZX4fwPeuC28Afw0KRgi8On4i5jIu1Xo8lJ8csNE6h%2BdiR2SeVgRlTabNedH4SPgcLK5pxb2Hm%2BTnQu3qGMEQ%3D%3D\"}]}\r\nserver: cloudflare\r\nexpires: Mon, 02 Feb 2026 13:20:44 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Mon, 16 Dec 2024 09:35:13 GMT\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"b3b168f040615fa951c17c1f6e4dafe6\"\r\ncontent-encoding: br\r\ncf-ray: 9c79ab195fc84c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":4979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4979), with no line terminators","md5":"b3b168f040615fa951c17c1f6e4dafe6","sha1":"8fb7686a87eb38db97a4d240adfde1d0ea58b9b6","sha256":"a3d0a4d7944393bbdf0622bc75b9d3a7cb0199fba2ce7872e9e9e44e6829f09f","sha512":"45084bce611e25aa56d333ae70f60f9ecbf3e2f1e989c35d02f3479a5a6c702a471bee27f1fe02594e1ee9e07689a5b73ad6cfd57cfa51a7ab68629f158fb845","ssdeep":"96:CL+3kGa4fya8XLpyxub1LFmWjMIQiJakH/2V07x7j2jY5fxTfkl1Y:Caad4ubpFmWgiJakH/s07x7CjYdxiY","tlshash":"0ba1018cb593b04547e3b161265f404ffa7eaaa9394f4160ca21dde83cb818bc077f69","first_seen":"2023-09-09T22:19:36Z","last_seen":"2026-04-11T12:19:24.568858Z","times_seen":103,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":64,"dns":35,"connect":1,"send":0,"wait":79,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/favicon.ico","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:24:58 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sat, 11 Jan 2025 17:24:29 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6782a94d-0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BISvKJL4HsNcnUTIsgPZIFPjwg41UWlUNijsF5hD8a7z%2B1PKpXD%2FSyFkz6MtbWffdHQsd6OEE62HFM9Xq1sG15c%2Fr9HkKtW\"}]}\r\ncf-ray: 9c79ab1abd57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-14T22:55:35.021665Z","times_seen":13759648,"resource_available":true,"data":null}},"time_used":1592,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xuatj.cn/bee/utils.js","fqdn":"xuatj.cn","domain":"xuatj.cn","tld":"cn"},"ip":{"addr":"172.67.204.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xuatj.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 12:16:59 GMT","end":"Fri, 01 May 2026 13:15:28 GMT"},"fingerprint":{"sha1":"EC:E9:B7:93:75:1B:04:1F:BE:F4:81:68:44:20:87:55:4F:FA:23:D2","sha256":"4B:F5:30:05:E3:97:E6:F3:EC:87:8A:E9:C7:E0:D8:8F:D0:F1:E9:84:B7:52:AC:E1:DE:07:0F:8C:2E:AA:FA:06"}}},"request":{"raw":"GET /bee/utils.js HTTP/1.1\r\nHost: xuatj.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: my4gs-lod=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 12:24:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Dec 2025 03:56:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694229db-11b3\"\r\nexpires: Tue, 03 Feb 2026 00:24:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwdND5%2FSrTf%2B8neJFRSgMQRuEgcFcptSDb6CVWJulBfh36UDzZqy4E0%2BQYrAapWQGdlz3ftPtL53ANtDgFYeQSqmMZOodmKo\"}]}\r\ncf-ray: 9c79ab1c1d8c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4531,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4507)","md5":"f502fb4b4caea7cdbee613b5c5c7f386","sha1":"0959cf9520724de739678f1a00a8c95bb1673c92","sha256":"f31750c617827aa1736c3c290dd80056e2a3e368c39864bf9e2480d503050116","sha512":"2e835ab9f5e1a03bbd0511026bc0fbd6005bf0555de11a47c84303ef855b0f4873e9698fdad5b5e3eca6b18fb1a4410548bd231c9c7b3b184913b4720ef74670","ssdeep":"96:YAMgrI1/PuTIH37rjYF7+WAtZeR02bXYLZhhN4Rk:YpR537W+DAR02jYLZpf","tlshash":"7f911d82eae11c284776889a0c9f3856f178db035c0ca900ba6f94e664d4efb51674be","first_seen":"2025-12-21T09:29:00.57479Z","last_seen":"2026-04-11T12:19:24.548936Z","times_seen":17,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.res.wiki/e74380251162/static/js/v4g/main.js?_v=1.4\u0026_t=1770035096","fqdn":"cdn.res.wiki","domain":"res.wiki","tld":"wiki"},"ip":{"addr":"104.21.54.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xuatj.cn/avaa8tXBxnRt4fmguangme7e91c1f52d4","date":"2026-02-02T12:24:56.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"res.wiki","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 11:39:50 GMT","end":"Fri, 24 Apr 2026 12:37:38 GMT"},"fingerprint":{"sha1":"4B:78:AA:B2:5E:D1:A9:27:09:ED:9D:48:6A:72:01:48:5A:64:C9:0B","sha256":"B6:A0:13:FA:97:B7:FA:F9:E9:11:EA:59:27:45:F2:87:D4:53:D1:CF:51:A5:B4:BC:47:5C:2C:FE:B5:C5:8B:A5"}}},"request":{"raw":"GET /e74380251162/static/js/v4g/main.js?_v=1.4\u0026_t=1770035096 HTTP/1.1\r\nHost: cdn.res.wiki\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 12:24:57 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AJRbA5UVv1ftF-Xn0UwfucooX_wp09sd8M9vx35nESv1sy83ZoK5Xql8drvGcnbgjDF71wWlPTgfho0\r\nexpires: Mon, 02 Feb 2026 13:24:57 GMT\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 12 Dec 2025 14:06:55 GMT\r\nvary: accept-encoding\r\nx-goog-generation: 1765548415392986\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 60425\r\nx-goog-hash: crc32c=WdMfmw==, md5=2nvRlJUpArmMmZv7/DD4Aw==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwkjv3ne6m0ezMQHh4glULjeSDAN3jS7rlgn42MLcNAy%2ByPuC0dUdftD4T46Ls1NrxVSLWJmG1DXXJN5yKgBR8ziTiC4FCxky2M%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\netag: W/\"da7bd194952902b98c999bfbfc30f803\"\r\ncontent-encoding: br\r\ncf-ray: 9c79ab1c784fb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":60425,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (60425), with no line terminators","md5":"da7bd194952902b98c999bfbfc30f803","sha1":"34a0aa856a87774b28b3920887cf5eb49e445017","sha256":"0be2ad61a1b0ce931e5624d14f3ef424fb99897c984b5b540b446c6961b5b4a9","sha512":"9686f676bbcf3aa7616624ca5d3a4d626804c33ae317b677a388eeb0eaa8e5b5e4c4b5274aebca9136ba317b73fd2b1e6ae95aedf24746f741b719fc0922f53c","ssdeep":"1536:LSSU0Epew48Y7mRqpxmU+mUjmfcCR6F4oithYlg5hGbZU:9fEBemRqpxmU+mUjmfcCMCYQhGK","tlshash":"f243a466a120e6fe4311dd2caf6cd55c90a1c9c5c2a1a8c25edffc0eed59c91443daec","first_seen":"2025-12-21T20:38:38.719127Z","last_seen":"2026-04-11T12:19:24.562856Z","times_seen":6,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":51,"dns":36,"connect":1,"send":0,"wait":465,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hm.baidu.com/hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=2106570364\u0026si=7b87ebb01108138f4a5652eb0f07735a\u0026v=1.3.2\u0026lv=1\u0026sn=285\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html","fqdn":"hm.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"111.45.11.83","port":443,"asn":9808,"as":"China Mobile Communications Group Co., Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xuatj.cn/res/pt.html","date":"2026-02-02T12:25:00.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /hm.gif?hca=F5B18B1F558C53C0\u0026cc=1\u0026ck=1\u0026cl=24-bit\u0026ds=1280x1024\u0026vl=0\u0026et=0\u0026ja=0\u0026ln=en-us\u0026lo=0\u0026rnd=2106570364\u0026si=7b87ebb01108138f4a5652eb0f07735a\u0026v=1.3.2\u0026lv=1\u0026sn=285\u0026r=0\u0026ww=0\u0026u=https%3A%2F%2Fxuatj.cn%2Fres%2Fpt.html HTTP/1.1\r\nHost: hm.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xuatj.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private, max-age=0, no-cache\r\nContent-Length: 43\r\nContent-Type: image/gif\r\nDate: Mon, 02 Feb 2026 12:25:00 GMT\r\nP3p: CP=\"CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\nPragma: no-cache\r\nServer: apache\r\nSet-Cookie: HMACCOUNT=6528A00B9F9B6C6C; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT\r\nStrict-Transport-Security: max-age=172800\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-14T22:53:50.286618Z","times_seen":335040,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
