{"report_id":"75d0c651-ea9d-4010-b860-db6bb9c690b4","version":6,"status":"done","tags":[],"date":"2025-11-21T05:29:28Z","url":{"schema":"http","addr":"tt6ild.top/t15p20250605v31765.html","fqdn":"tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"title":"永久地址国际成人视频电影-亚洲成人网站电影SVIP-欧美成人动漫伦理片无广告-亚洲成人网站电影SVIP","dom":{"size":201799,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12968)","md5":"49247f8e18346e5df32ec574a8dab76e","sha1":"33d43d0c42f52117bf12fef16dbda6ab775e30c4","sha256":"98c5b2be98cf94da22bc5ed6a805deae5b83507f9afb305b89fa8e03973905bf","sha512":"e09b2b49df28c9d78508ea141ea1e7cca64779782660da8ebc2c526add72df3b6eeb259e57e909747c6adf041eac1e8215be4df9e92a1088cafb8c462c7b47a6","ssdeep":"3072:LHkxn2zTGo0KlbiCpgaRKEeEKRBJ6OlcwS9LX5Wtu1WBQQFZuY2y9u:jkxn2zTGo0Kl2kKRBswS5wtu1WBEy9u","tlshash":"1814e88a9e683e9993164392e5cf43d6323f43579805454af04db18ccfbfa8e26f1a17","dom_hash":"domhashba39698e3e5dfda72edbc3c2deca5528","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tt6ild.top/t15p20250605v31765.html","fqdn":"tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-26T05:29:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-21T05:29:08Z","timestamp":1763702948,"ip_dst":{"addr":"172.67.207.55","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":54860,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-11-21T05:29:08.367077+0000\",\"flow_id\":585086091404577,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":54860,\"dest_ip\":\"172.67.207.55\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"tt6ild.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.tt6ild.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":547,\"bytes_toclient\":938,\"start\":\"2025-11-21T05:29:08.009505+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.tt6ild.top","ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-26","domain_rank":0,"first_seen":"2025-06-24T14:56:44.172787Z","last_seen":"2025-11-07T19:58:37.506263Z","alert_count":33,"request_count":35,"received_data":2388101,"sent_data":16557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"DPlayer","description":"DPlayer is an HTML 5 video player that supports pop-up.","website":"https://dplayer.js.org","common_platform_enumeration":"","icon":"DPlayer.png","categories":["Video players"]}]},{"fqdn":"api.indexnow.org","ip":{"addr":"13.107.5.93","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2021-05-27","domain_rank":2251126,"first_seen":"2022-03-05T02:31:52Z","last_seen":"2025-11-19T21:47:36.396481Z","alert_count":0,"request_count":1,"received_data":582,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sp0.baidu.com","ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"1999-10-11","domain_rank":220073,"first_seen":"2014-12-05T23:12:12Z","last_seen":"2025-11-17T02:26:05.267962Z","alert_count":0,"request_count":1,"received_data":116,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tt6ild.top","ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-26","domain_rank":0,"first_seen":"2025-07-03T06:50:21.02958Z","last_seen":"2025-11-07T20:37:57.869147Z","alert_count":1,"request_count":1,"received_data":70865,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wap.yandex.com","ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":101865,"first_seen":"2025-11-07T19:46:25.886375Z","last_seen":"2025-11-15T11:53:42.468571Z","alert_count":0,"request_count":1,"received_data":1869,"sent_data":505,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-21T05:29:08Z","timestamp":1763702948,"ip_dst":{"addr":"172.67.207.55","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":54860,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2025-11-21T05:29:08.367077+0000\",\"flow_id\":585086091404577,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":54860,\"dest_ip\":\"172.67.207.55\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"http\":{\"hostname\":\"tt6ild.top\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://www.tt6ild.top/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":547,\"bytes_toclient\":938,\"start\":\"2025-11-21T05:29:08.009505+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/hls.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40eaec01caf20d16b24b872213971d08","sha1":"21695c49e361daf5afc12d94e027e5931cb81a23","sha256":"94ce929f5bf331329033c50b59401dbab0cff655b604496b35c98fedf03d830d","sha512":"4a79460fb125ff1a04809b1da34eedfcb36c779611b93168636697e51a43970036f6db4e1e7622edd88cdd1cb2b032ed4200046c2a4dfa5dee9e39610e91a635","ssdeep":"6144:sh18rSA8uAfz+pjEZB7PuhuhzxhoTB7P6FkqKxuodHBxibIKf3RDpa4GfROamBhw:si8uI+ZQ7PquFYqKxzyhpfGB","tlshash":"b1b428ad37a5a0164382b169903f5607633e7d0a280dc16cfa2be9d72d7994db03bf74","size":522716,"data":"","first_seen":"2025-03-28T05:59:35.572888Z","last_seen":"2026-01-26T07:58:51.618048Z","times_seen":8976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/p2p-media-loader-hlsjs.es.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a9c7e7d1bbea2662308dc2f4f532bc9","sha1":"f430b35f31150642e8369fc69f9bf62c65c57f18","sha256":"a4b2c3e89ea24cbad146e6f67a09db6bb967be62ebffc00a43a7674886afe537","sha512":"b83ba5d6e2c46dcaaee978d88c11292989ee8f1b2905c693e20010d3346130ce156fb4cebffaf255ff2fb1fbaa021b21a55cb9b38d9730d6297c614b27de3548","ssdeep":"192:+OR5I3tAV8m9W+Glc687NfZqUa7WSR2bC9hZAPoOYn8ZnQyZelJ62sBrKmeyYFKu:FR5itK9ZW9h2PoO+8NFM03osGG0T","tlshash":"d212445a27fb642b8633e099af0fce227735a54b2147cd5d3d6c32a54f40139c27aa78","size":9604,"data":"","first_seen":"2025-03-06T11:15:44.341082Z","last_seen":"2026-03-23T12:10:21.85165Z","times_seen":9074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1af451782da8c35a6778d4255d9f9151","sha1":"2f64871c8df3b344c358c424846aecc92cbdb487","sha256":"314da8f76a2a6786ffb01b6fbabb29989232b38ef8e6bbb179d2ea7714aae0fe","sha512":"d1ddc7a21fe3b87402ccd8b811c0d7a00ee2e97485658e50c19244d026555d13125b3cff7ee1105d27b15d2570ed270f26931e714b0dbf58ea5564967453ab45","ssdeep":"","tlshash":"6ed05b1d6c91e43b950d306b513bd62cb7f25a213410e02609cdcc8d6514ff98d5dcd4","size":264,"data":"","first_seen":"2025-09-11T07:51:43.927992Z","last_seen":"2025-12-24T07:53:06.94318Z","times_seen":7227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/dingbuwenzi.script?v=1763702949808","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"654797af8b1f3afbdcdccb2e23eb7885","sha1":"f1ad85dbbbe1c497fcbfe3d01e742827edca02bc","sha256":"c30c351b470f18ff1e4e11eeee068743f3ce2b0bd5f677109b00a65ac0fdb41e","sha512":"b94d8267575b027b5ab89904879b9ae11ffdd1ebd1cdd16c6bfafe4ec4d74d83e6f565c82ab878a14af4e6d4b2ed8df3021fe129f5e20640125256f6aac457b0","ssdeep":"","tlshash":"5531bdce9d92ca2c5b974e162ef7f5fea7a470741e8582438416d80c9f4034629395d8","size":1788,"data":"","first_seen":"2025-10-31T01:37:25.58794Z","last_seen":"2025-12-11T01:13:12.135871Z","times_seen":2342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.lazyload.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","size":2232,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-05T13:40:27.60355Z","times_seen":18879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e79a5d2248325704fab0ebcb903f0899","sha1":"d3ab8e61e940d5121506d6cbfb5142c55bbb7195","sha256":"225f9bab6112957815096de4a5fe9c1c38f0fda2f63711be012557e41fbee1af","sha512":"1f0207ba2e13a272840bdec720bd4232e72a797132182e2d5ea4ace4f082de0b7d8f8a7d5bbf4078de673317ec37702934de7ae4f245121ada3474a7237f43e3","ssdeep":"","tlshash":"9f900257b1146d0465513025d877402c042660412401d880540404625b2a0582069448","size":46,"data":"","first_seen":"2025-01-01T07:40:20.984154Z","last_seen":"2026-02-24T07:54:41.835904Z","times_seen":10992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-05T14:39:21.180175Z","times_seen":60717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.autocomplete.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","size":25108,"data":"","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-05T13:40:27.598121Z","times_seen":20015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2bee8d2a28e6eaedc31523b17a9cc04","sha1":"4ab4f59221444cef0c4424bb8edc121d4940a93b","sha256":"a1c7ec5971bbd366fef5609c38a1b47586af62f45f90f8e506353b3a1c602c18","sha512":"8827a9f45512270baae3c4e75587f4ed34800aacf6ee972c3573867370d33acabb9d5ebcbbef29215826df7f1eff6421b4b53e6e80eb0954724ed3c34340dbd7","ssdeep":"","tlshash":"d7d05e63315146f15dfe666f526a7b89747651d10809704118497c205530f5b22aabe4","size":247,"data":"","first_seen":"2025-01-01T07:40:20.985393Z","last_seen":"2026-02-24T07:54:41.836439Z","times_seen":10990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8ffbbd2246fcd979227391311e25d05","sha1":"cf7ea9319d8de32a5ea3bf5b0fbce18b28503791","sha256":"64b737571b92089b9d65972ccd1f5c6f6fac68a2191d4d7f1f4f3264ee98d2dc","sha512":"939205ebdcfe900a3a166c645e0c2627e77a0ceee92961b7136e949344f62057423be9561f679f167cf1786c7aeeb5760f90784856cb98c6507d046e1d01f4b8","ssdeep":"","tlshash":"5680000ccf22caa0380a80ab0ab3e03fb08800822c20c0e302cc08caa0a0fe20c88380","size":37,"data":"","first_seen":"2025-09-11T07:51:43.933487Z","last_seen":"2026-02-24T07:54:41.836946Z","times_seen":10250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.lazyloadb.js?v=251111.3","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d342dc35be89b9f94ca3ba4a323047a","sha1":"7c8a5f435c543d4c107937c51ed4e7655f250f5e","sha256":"85208958e33e8225a7f96b82e8ba256bebcac1926781627c864ea57a998728c9","sha512":"da86a1c84b669ff6f4c36140053a22c49ded350aba635da7125fd388cac71581c6abdf819a6f23bd480809c24defa7da23d3cb203736415cfe0b84e1dbc0d845","ssdeep":"192:Swk26MW2AUKaTihxRCJGk9rzeBMUeFMCMQbxjRKsK:i2NW2HNZrMMUe9DK","tlshash":"7fd1d74c39f320488a23907e6f5f85993239a007395bcd483e0c97681f95b3587abbec","size":6633,"data":"","first_seen":"2025-11-19T02:34:34.266028Z","last_seen":"2025-12-13T01:07:13.162209Z","times_seen":1033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/js.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92ade2d512b3981f1041c2ae3e9ba05e","sha1":"eb7073f4d643633d67b1e924d8d0046b2a64207b","sha256":"0967563fe34912f4a673c6be88057d276f23c892325e91271d97c54260031627","sha512":"abe7064dd0c55c34edd7ea873c029c1dc7341f65d87766d30345d45292d3e79f9d311f1062c0c67b77790a5d37e39a9bd07a4cc929fafd1dbd5fda07f8422cf9","ssdeep":"48:QPHizsoUdDOMSZekZTMucMGk5a+zu1H+ORPiyi7i5iIp8GvyU/5/i/WBbEbs8ib/:PZUYRf589H+OR/8G99r4ReEPi","tlshash":"e7a11f4af1a535651437363a0e7f60043777808ba88dee90f84c49e08fa923c55abfda","size":4787,"data":"","first_seen":"2025-01-01T07:40:20.941475Z","last_seen":"2026-02-24T07:54:41.804961Z","times_seen":10893,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/flwz.script?v=1763702949810","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"497cb428c62cd42e1867e3c2767ca315","sha1":"973082bff60a7df9ac4a6d863b16df0f23ae6082","sha256":"e276926ee249409885de9d68fc2a12286f5dd1c27b5e9b6ea6eb5f86c992bad1","sha512":"19c04cbd63b5cc301ee47f369d6459d2aaa847a7d0a35b987e3864c41afd17a8d843b6166891f9639fc85180a61aca3853e3eba2f49e591ab3af34ed77088fac","ssdeep":"","tlshash":"5021f18d6d90a425db2b45292d7fe2fd73a830781dc8e352485bcc087fa07826f298dd","size":1178,"data":"","first_seen":"2025-10-31T01:37:25.588756Z","last_seen":"2025-12-11T01:13:12.146251Z","times_seen":2344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/splb.script?v=1763702949832","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d74f18b4392137c67a5f3355e0a9a815","sha1":"6d001db051a063ff6b045663971ef5718c0a08e5","sha256":"482bccf3640868636e290501f6c3921dcdc831e1a485ebc71f1c32f7ad6d6bd1","sha512":"cb43842adfbc4d09a70f0d6a19db0feccfc254f1bd60212c005be172a819d908786040fe04aa688815071895db1e419c7e8489cb40c0e4bc02e6f1599bf8d742","ssdeep":"","tlshash":"b321334c2de5d424c71700511977e2fcf668302829a8d302c89ecd093f60f66ab3acdc","size":1118,"data":"","first_seen":"2025-10-31T01:37:25.583908Z","last_seen":"2025-12-11T01:13:12.119463Z","times_seen":2369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/swiper-4.2.2.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4ac13876fd025fc6dd6856e705d1e2a","sha1":"c0e778fe38bc97357c0b2c4b9c1ce439daa52596","sha256":"1ddbfaeea8074f1a5f1ef55aae884c05cfdfccb36f3e83d79066d74d10e96eb2","sha512":"c047e147f52312eb9e538fcc8422375677503419e2db1f4f5ae5319efb6acd80be412ac89220a61790d9346a46473a49e0c5fd7564d5343c71f6f040835ef034","ssdeep":"1536:Tj2qhExfOYEWAGLzJgpa8K8lK9l3cMi5sVW56K7D3eMhg/jY4vHgZsUOU7eBWqTT:e2GL+4wK7yX/hgM+HgZsUOUyBWq/wFUJ","tlshash":"05d3184eb39061a551e36257525e8241a3b62409780ad0ac35b6cce7adbde4c13bfffc","size":133050,"data":"","first_seen":"2023-03-07T13:19:47Z","last_seen":"2026-04-05T13:40:27.591582Z","times_seen":12139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fc9e3902bc4260ab392d4dc2feba221","sha1":"94d91ca2c619fdf5a5b549706e63e0f73046f339","sha256":"af904abaafda721c1d21b569d2962ac76362f2dc25a2c3c960ba925c2d7370b1","sha512":"e95da3c980754df949e38bff165cc0e5a644a82fd8bd5e39b05261542dc1b6978df8789ccd05fcdaa3d983df3bf6a0edf1daa7040248ab14d78ffb6245914df7","ssdeep":"","tlshash":"46a0021d9dd0cee565cac6977d37d03f499054812860c5e21cc858df9364bf50c9514c","size":68,"data":"","first_seen":"2025-09-11T07:51:43.935324Z","last_seen":"2026-02-24T07:54:41.837485Z","times_seen":10249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db8fce4bfc7aa7921f236f4d56df0012","sha1":"f546e0d3b457dd9b03890dc21efb641663fa7572","sha256":"7c6ceb3e33963beaee40a57dad2c38e2ae6748d89c12ff73f36f50088181f9a9","sha512":"bd25c1dab98b76204828986a8767683701fccce8b793c7183f786ac4999b3c38a0979384c477334950cdd5fd785faa9d97bc0d336a38b541568f3b9e1b7781c2","ssdeep":"","tlshash":"60800008cea8ca303b88888b0a33c88eb0800082ac20c0e302cc0ac882b0fe00c80280","size":34,"data":"","first_seen":"2025-09-11T07:51:43.937242Z","last_seen":"2026-02-24T07:54:41.837953Z","times_seen":10252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery-3.6.0.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T14:43:50.675854Z","times_seen":445348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53743946b0792e8f18ecae87538dfd44","sha1":"6ed50eb2c5983e84730109ec7cae3ad0d857ac18","sha256":"9dbaba39f60c43415fb12010e1869e8aae61c2c4cc8f838bc5e775a9ed8bd508","sha512":"8cac9a77f3d45ed3c410460fad7b4d7d718b1cdbfb6496ac27eb3a0c5a3e8e1190525359427bff1e7865f622a7e547715025695ba0dc59bac9b9d0b2cf3c9dfd","ssdeep":"","tlshash":"73800008cc20c820388888ab2a33c00bba80008a2c20c2e203ce8cca82a0fe00f80a80","size":34,"data":"","first_seen":"2025-09-11T07:51:43.939214Z","last_seen":"2026-02-24T07:54:41.838538Z","times_seen":10135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/DPlayer.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2053c6161b97bbdb9cfb085689e5f2a8","sha1":"efdf49a6c1023d835e8818104400827699afa2ec","sha256":"75186678ce237b8c050e8ccfa67980f7cfb921293fd9038e265faebe02aab69a","sha512":"0237f5f101aabcaf9ff3dc6de15c23e14ce8b2fb216066deadfc01df2737f17e9dd10ca20a8341072f4ee8efcbbefd979ee755c62c3dc8045de9a2b5072db47a","ssdeep":"1536:nFri4r9aKySaa3rzg7hSwaKySaa3ref7j3MEwOMEa8vTDadMcBjOsCSwixK1LzVq:vNDyMgjKbixKVhjLIR2INivLS","tlshash":"7254b20b364131340262afe8c6db534a36347311e9728729f65ef9de8f9d84c6427b7a","size":304503,"data":"","first_seen":"2025-05-09T11:16:23.839815Z","last_seen":"2026-03-22T19:29:37.089015Z","times_seen":9058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/zhongjian.script?v=1763702949808","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aae37d6081cefe1e32c0e14c08716681","sha1":"0ffd94530ca0682015214edf135bb1db27cbde19","sha256":"d1e57da498cbf4a32dba62d426429b9040e8186c416469bc393fdcc066ebb0b9","sha512":"21e6dba6abefa8807f7f3b961bf3cdd8cce7182ff27356593d0fff0550a0ac91a325e9d791f7bcb5ffa545a686f7226740a342e61d78592de61c360358136553","ssdeep":"","tlshash":"314173592cb44424e30310669ebad3fcba1532293b56d333b8beab485f44f464d625fc","size":2160,"data":"","first_seen":"2025-11-21T05:29:38.220028Z","last_seen":"2025-11-21T05:29:38.220028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/splb.script?v=1763702949878","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d74f18b4392137c67a5f3355e0a9a815","sha1":"6d001db051a063ff6b045663971ef5718c0a08e5","sha256":"482bccf3640868636e290501f6c3921dcdc831e1a485ebc71f1c32f7ad6d6bd1","sha512":"cb43842adfbc4d09a70f0d6a19db0feccfc254f1bd60212c005be172a819d908786040fe04aa688815071895db1e419c7e8489cb40c0e4bc02e6f1599bf8d742","ssdeep":"","tlshash":"b321334c2de5d424c71700511977e2fcf668302829a8d302c89ecd093f60f66ab3acdc","size":1118,"data":"","first_seen":"2025-10-31T01:37:25.583908Z","last_seen":"2025-12-11T01:13:12.119463Z","times_seen":2369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/p2p-media-loader-core.es.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c9174631c4b2a9459c353fef87feff26","sha1":"0313a0df3a8b3347eae62eb3f5795d4aa136a0ab","sha256":"edcc9ae94a274498520653860f301ba1237035fa149f82cb6efb1ff0ad0a1adc","sha512":"3e1bf78dc3c76824494335a3a0282d2a3dc0632bc98f75d29aaec864e0e9af30e99b79491d4d31aa0e5eb821289635747acd5dee0acbbecdfae196457013d3d6","ssdeep":"3072:ckkwFLGAZ+ogJkayzGc0/TGv9D+sXdHqr60/vzcOoZKp:ckkwWTGv9D+sXdHD0/vToZKp","tlshash":"e0f3b74e63fb10269163f0796e1fca06b735980b228acd1d795c92e89f44934c6f5fb8","size":161330,"data":"","first_seen":"2025-04-13T04:49:48.803106Z","last_seen":"2026-03-22T19:29:37.150735Z","times_seen":9068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39357708cc2707cb5e8f3c0cc0cd6bc7","sha1":"da14fce4bd6aa0240f7e2680eb6eb64286bbac68","sha256":"cd99c36227c000f27660e20d039763943d56b227356cbdf8660541ea421f0087","sha512":"964814d0504ddf8c2b658a195b6b3317114727d35b5ab0f692aadd8728ce7437740ea0a1c6821ee1fdd9651adcb15e0bd3b023a8cbc22bd408cdca3b7c30b92e","ssdeep":"","tlshash":"9101bddf9050665c06930064adfb39cce2bd0f2a8d646490e526c09115b863742ebed5","size":786,"data":"","first_seen":"2025-01-01T07:40:20.986664Z","last_seen":"2026-03-22T19:37:33.992744Z","times_seen":10734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed93d557bcb9777a1258eee35568c75","sha1":"d4e90ed0ec420acc38f30eaa3ead1046f8fd6aa5","sha256":"0904a156c4bd8f80461e41a1815e71b77598b31fd18bdc9a04dad181a0038fd7","sha512":"91663d079e29647455decd0b0258eddadeb791c46873ab675221bf2f9c2d42929830350983b3472f00bd788ae35833ee08d2f12151fa8cb00e990a8f9f991b4b","ssdeep":"","tlshash":"0d01235bb091554687d10469c93fee0f94bb2b78ec88c8548d036d951ebe2276b0fc54","size":676,"data":"","first_seen":"2025-11-12T20:42:21.146979Z","last_seen":"2025-12-24T17:28:40.80062Z","times_seen":1514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"239d12f4199cd80d4c576014f83916c2","sha1":"976bac441610c8bec5db27c3b02c6aa3828f4cd7","sha256":"5909427e0ee7793c9eb11d4872a6089e9aaa594753e9e85822b9ec16b3130095","sha512":"1879460e0961a4a39dee3e73bf3e81ebeaf49acf5c3d316582591f1e4c4d4c040e845b4829ed44532914f0f8a3eef22db6f8dfc19f298c6b24d32fd709293434","ssdeep":"","tlshash":"25f0dcb53c88813c832602652333b259715a2929784ead14d21e18922891ca908bf80c","size":460,"data":"","first_seen":"2025-08-26T03:05:52.96285Z","last_seen":"2026-04-04T23:44:35.484166Z","times_seen":8063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/dingbu.script?v=1763702949807","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"143ff0ab53eb40cd0808b4624507a154","sha1":"169445820a3be6700a5db2b9f016d45ee5599968","sha256":"58a34be26e9af2877577abe1e8cf9fb263c59894d961aa3009167fad9e9bc2a5","sha512":"f2816f974b99bd6522ebeffb23fcb7394fdfe311639a015cd05e44f6a483879546e0dd75750778d6fae88f2abf5cfc1ecf4762d61627ac6c9dc4cc085b515f79","ssdeep":"","tlshash":"1601b18c1dd1b478e65a48322dbae5bd7a3811243a89c2019c1dd81c6f647a95a76dcc","size":782,"data":"","first_seen":"2025-10-31T01:37:25.580091Z","last_seen":"2025-12-11T01:13:12.13504Z","times_seen":2346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/tubiao/icon.svg","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/tubiao/icon.svg HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:11 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWAJ7EumqOvCbyouXBZKzkh0nUPkxzNBPN3yWNzMk4Tc82Atb13z3f3c9PwV0gAeqPlT%2BpTAkxJkKkcKeQo48X2V3HdPrQO%2Ftjsmg6Yw\"}]}\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:11 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9b2ae4e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"cd073ad5b27b06c2d79fc7e702e669d6","sha1":"7e6e7b9ac6c5e1ff2102849c82358bb40878a9b8","sha256":"80658f2965c3c35abf657dcf8db55947a0a863c142cbc0ab0ae74435297795a7","sha512":"7b7d220d6b64527c40914fdd8f685af08b2fd9bc6aed04e9dae4998317fcd54af1d15fc4a169fa62dbe79fc43683658ac9741789cfea7f755e7e7b92d61fe784","ssdeep":"","tlshash":"06f054f7422714d0c76d603b044561aa47db4a552321ef140348e226231b05baa666c7","first_seen":"2025-06-30T07:00:05.320697Z","last_seen":"2025-12-29T23:52:47.867766Z","times_seen":99,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/tubiao/apple-touch-icon.png","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/tubiao/apple-touch-icon.png HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:13 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V53tw9qjqEDtPgnCmUMeiboSiGVbhRte1rlAUqUT%2BOYXdFIJOXG5aeRrMWbxWEzpFSHc9OjYC4QlhGLwzwGNn%2BeFlZwl70tA3Jd%2BRMRQ\"}]}\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:13 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9b2ae4d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"cd073ad5b27b06c2d79fc7e702e669d6","sha1":"7e6e7b9ac6c5e1ff2102849c82358bb40878a9b8","sha256":"80658f2965c3c35abf657dcf8db55947a0a863c142cbc0ab0ae74435297795a7","sha512":"7b7d220d6b64527c40914fdd8f685af08b2fd9bc6aed04e9dae4998317fcd54af1d15fc4a169fa62dbe79fc43683658ac9741789cfea7f755e7e7b92d61fe784","ssdeep":"","tlshash":"06f054f7422714d0c76d603b044561aa47db4a552321ef140348e226231b05baa666c7","first_seen":"2025-06-30T07:00:05.320697Z","last_seen":"2025-12-29T23:52:47.867766Z","times_seen":99,"resource_available":false,"data":null}},"time_used":2416,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/swiper-4.2.2.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/swiper-4.2.2.min.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187c-207ba\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41lyjOrtvcKh3okA6Ll%2FSE04ZLMP41O8UVU5%2Fx3Chfg0ca2joG7F7NByUX%2FxF82BUgsbzBK7mIP6tz9mjSvDT9IG7eV%2BOLqkzopIAKUE\"}]}\r\ncf-ray: 9a1dc9a59cfc4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"e4ac13876fd025fc6dd6856e705d1e2a","sha1":"c0e778fe38bc97357c0b2c4b9c1ce439daa52596","sha256":"1ddbfaeea8074f1a5f1ef55aae884c05cfdfccb36f3e83d79066d74d10e96eb2","sha512":"c047e147f52312eb9e538fcc8422375677503419e2db1f4f5ae5319efb6acd80be412ac89220a61790d9346a46473a49e0c5fd7564d5343c71f6f040835ef034","ssdeep":"1536:Tj2qhExfOYEWAGLzJgpa8K8lK9l3cMi5sVW56K7D3eMhg/jY4vHgZsUOU7eBWqTT:e2GL+4wK7yX/hgM+HgZsUOUyBWq/wFUJ","tlshash":"05d3184eb39061a551e36257525e8241a3b62409780ad0ac35b6cce7adbde4c13bfffc","first_seen":"2023-03-07T13:19:47Z","last_seen":"2026-04-05T13:40:27.591582Z","times_seen":12139,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery-3.6.0.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187d-15d9d\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz2gTeQia50fmfSsBWwgRN4sZGbtV5ThmbOVs1%2FN2ad0TAOaAVQz2L4aFNGq109lk%2B4wrV4AjH9Kccj2EG%2BmzNGY53%2BveD8OOsjlMTPA\"}]}\r\ncf-ray: 9a1dc9a5acff4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T14:43:50.675854Z","times_seen":445348,"resource_available":true,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.lazyloadb.js?v=251111.3","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/jquery.lazyloadb.js?v=251111.3 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187b-19e9\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5RMuY2Hi2RFsrh1CXIxmj6fAFHUatTKcqLqQSh7bMb%2FIpK5Y%2FqD1qyGr7kv1vZZAA8nhX%2BV7XkTRE2hjswxObzPXCI4F2KXsPJEqyhl5\"}]}\r\ncf-ray: 9a1dc9a5ad024e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6633,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6d342dc35be89b9f94ca3ba4a323047a","sha1":"7c8a5f435c543d4c107937c51ed4e7655f250f5e","sha256":"85208958e33e8225a7f96b82e8ba256bebcac1926781627c864ea57a998728c9","sha512":"da86a1c84b669ff6f4c36140053a22c49ded350aba635da7125fd388cac71581c6abdf819a6f23bd480809c24defa7da23d3cb203736415cfe0b84e1dbc0d845","ssdeep":"192:Swk26MW2AUKaTihxRCJGk9rzeBMUeFMCMQbxjRKsK:i2NW2HNZrMMUe9DK","tlshash":"7fd1d74c39f320488a23907e6f5f85993239a007395bcd483e0c97681f95b3587abbec","first_seen":"2025-11-19T02:34:34.266028Z","last_seen":"2025-12-13T01:07:13.162209Z","times_seen":1033,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.indexnow.org/indexnow?url=https%3A%2F%2Fwww.tt6ild.top%2Ft15p20250605v31765.html\u0026key=xqupdxiq15qtps71ena8ku0ykd5g35p4","fqdn":"api.indexnow.org","domain":"indexnow.org","tld":"org"},"ip":{"addr":"13.107.5.93","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.indexnow.org","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 06 Oct 2025 21:16:41 GMT","end":"Sun, 04 Jan 2026 21:16:41 GMT"},"fingerprint":{"sha1":"1C:A5:65:45:1C:0E:39:F8:88:51:44:35:A8:00:B3:86:13:3B:FC:39","sha256":"87:D0:1E:9A:BC:89:61:93:5B:D1:C2:32:F7:7A:EF:E2:BA:8B:D9:F3:AC:42:85:08:38:A5:D3:96:86:8D:11:CD"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.tt6ild.top%2Ft15p20250605v31765.html\u0026key=xqupdxiq15qtps71ena8ku0ykd5g35p4 HTTP/1.1\r\nHost: api.indexnow.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tt6ild.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 202 Accepted\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: -1\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cache: CONFIG_NOCACHE\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nx-msedge-ref: Ref A: C5D67492664641E1A0C3A3982021394B Ref B: SVG20EDGE0220 Ref C: 2025-11-21T05:29:09Z\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":468,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/p2p-media-loader-hlsjs.es.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:13.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/DPlayer/p2p-media-loader-hlsjs.es.min.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c5bc07-2584\"\r\nexpires: Fri, 21 Nov 2025 17:29:13 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jqolqwJr5eyMEAI1po%2Fvs2BgknjsP%2FTkt7PJk38S165M%2F51M%2BGT%2Bh0DmhgMAGR%2FD2AZHURb0rTf1p40eT9ZGv8KPdUzBzJxwrXcV%2F7X\"}]}\r\ncf-ray: 9a1dc9c27fcd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (447)","md5":"2a9c7e7d1bbea2662308dc2f4f532bc9","sha1":"f430b35f31150642e8369fc69f9bf62c65c57f18","sha256":"a4b2c3e89ea24cbad146e6f67a09db6bb967be62ebffc00a43a7674886afe537","sha512":"b83ba5d6e2c46dcaaee978d88c11292989ee8f1b2905c693e20010d3346130ce156fb4cebffaf255ff2fb1fbaa021b21a55cb9b38d9730d6297c614b27de3548","ssdeep":"192:+OR5I3tAV8m9W+Glc687NfZqUa7WSR2bC9hZAPoOYn8ZnQyZelJ62sBrKmeyYFKu:FR5itK9ZW9h2PoO+8NFM03osGG0T","tlshash":"d212445a27fb642b8633e099af0fce227735a54b2147cd5d3d6c32a54f40139c27aa78","first_seen":"2025-03-06T11:15:44.341082Z","last_seen":"2026-03-23T12:10:21.85165Z","times_seen":9074,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/p2p-media-loader-core.es.min.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:13.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/DPlayer/p2p-media-loader-core.es.min.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/static/DPlayer/p2p-media-loader-hlsjs.es.min.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:14 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c5bc06-27632\"\r\nexpires: Fri, 21 Nov 2025 17:29:14 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJlZxrDgQ8%2BPZWE%2BSeZz71dErvV1%2FcFcLTw8wHI%2B3dN8TAOlAggckdORE%2Bx0h275tAccYghhBRHE0zOuSA5irI3wpj6xCEkVTGfMO5%2Bp\"}]}\r\ncf-ray: 9a1dc9c4afea4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161330,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1103)","md5":"c9174631c4b2a9459c353fef87feff26","sha1":"0313a0df3a8b3347eae62eb3f5795d4aa136a0ab","sha256":"edcc9ae94a274498520653860f301ba1237035fa149f82cb6efb1ff0ad0a1adc","sha512":"3e1bf78dc3c76824494335a3a0282d2a3dc0632bc98f75d29aaec864e0e9af30e99b79491d4d31aa0e5eb821289635747acd5dee0acbbecdfae196457013d3d6","ssdeep":"3072:ckkwFLGAZ+ogJkayzGc0/TGv9D+sXdHqr60/vzcOoZKp:ckkwWTGv9D+sXdHD0/vToZKp","tlshash":"e0f3b74e63fb10269163f0796e1fca06b735980b228acd1d795c92e89f44934c6f5fb8","first_seen":"2025-04-13T04:49:48.803106Z","last_seen":"2026-03-22T19:29:37.150735Z","times_seen":9068,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ua_20251121.json?v=1763702954233","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:14.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ua_20251121.json?v=1763702954233 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:14 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 13 Nov 2025 07:13:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69158521-a0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISJBCduCcrZQpooTGJiFcWXRLcDMR0pOb4Rpj1qrqQ0zgsAjcWNytNs45T2%2B4EeU2cH%2F%2FkE%2Bb489NO8NEMrCBkulEJIkuXb8%2BqedxUv7\"}]}\r\ncf-ray: 9a1dc9c808184e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9780fcfc3c031bc3c7e847e1dc5cf624","sha1":"b802263bb8329cbc5a0d65e2423c928c8117a151","sha256":"0f91df9dc0042b59ca4a09554347bbe0f69615c4c523a0f443e131e8b2a64e36","sha512":"ed2d7576c558fedb579f2e8c2d9f2493294e744127eab880f8be1529f7e21cc77a523e08883d8913440410d183033201dc9e927d276b20c0034303974ed448b9","ssdeep":"","tlshash":"b0c08ca284086d234a76e76054c52202f3614b27b090184af93e809c4f722514a05e00","first_seen":"2025-11-12T22:46:31.293195Z","last_seen":"2026-01-26T07:58:51.614751Z","times_seen":2645,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/ads/ad.png","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:14.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/ads/ad.png HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 316070\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 13 Nov 2025 07:13:35 GMT\r\netag: \"6915851f-4d2a6\"\r\nexpires: Sun, 21 Dec 2025 05:29:16 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQJqejCPLN8xKuDXhsyVbMWtLAUsjijfDvOSC%2F417eXHRk%2Fl9jlCNRZUb1M2maKCXlBl7zvO%2FzVYKfgPiTotw2MoIbZKrNoqkmZbF9ZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9c9a8484e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"89e067e7c5a2e81525784f6862915bbb","sha1":"94af011be5b72010ba70b71526c19f182b564206","sha256":"1dd13d045b005ce5811789735143bc839abea74c7f365f9cc0ca9637d9ac08a7","sha512":"0da44430f75f7f132fc0163229366781cbc1e9b7bc61727da2fb7e8f5e7a8dbf1cff1742e29cf689d63f028678625e9a2f141ff26d984c07be2d0e24de013b82","ssdeep":"6144:9OYIyhmxv7Ivs9FaqS5qa78M80VindaWsZVjA1Nw2Iq54iDVho1VX77W+nQ:9Fvhml7I0TrU8MfVOaWsDOw2F8VX77WR","tlshash":"c36423d8ee34117dc72e6e6db14cb4a49854bf3a32e7509dc59b0116f6f038a18b0b6e","first_seen":"2025-11-12T23:52:03.797921Z","last_seen":"2026-01-26T07:58:51.61971Z","times_seen":2642,"resource_available":false,"data":null}},"time_used":2075,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1402,"receive":673,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/css/iconfont_1.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/css/iconfont_1.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"691e187b-2ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJ7bNofmG6hxqRmLEbfwvpnhfHfeYTGQj2WuAangul3XIglUdmbB%2F11DLD%2FV4dcY%2FVBWWvmghFy3yCNwhbrSE20y3p%2FsonIAUOOFcBIl\"}]}\r\ncf-ray: 9a1dc9a59cf74e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"435675a50d973e01178fc32fa25cf338","sha1":"b5d0314468bb01e5f160270d0e594126a85d1985","sha256":"878a28ff8ea826772349505f44ffd15484fdbbaa476eb0c280cecf32ad854d93","sha512":"546ae75a194eb71d85fc426717e79f032c519c641e9bf9585f3c694ea305728d0414ef6f90ccd33fc09aa51b7b009a77966c443893ab9e872a5d4d2815273b18","ssdeep":"","tlshash":"070144e4a8be0c602349a9c13202ba25ef59b6654d479c5be7a33c8c66f371591937cc","first_seen":"2025-01-01T07:40:20.938354Z","last_seen":"2026-02-24T07:54:41.824936Z","times_seen":11015,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/zhongjian.script?v=1763702949808","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/zhongjian.script?v=1763702949808 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1S1yUb3YAgsgPHYiiWhyPgmFDZZwpuPXhw13g1uL2Y0q1KZG5RRcm4qVxEYx5l8305EofYeWSo7C7%2BORGLjLN4ZGNd5IVAme%2Bfj6yOi\"}]}\r\ncf-ray: 9a1dc9ac5d604e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2160,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (796)","md5":"aae37d6081cefe1e32c0e14c08716681","sha1":"0ffd94530ca0682015214edf135bb1db27cbde19","sha256":"d1e57da498cbf4a32dba62d426429b9040e8186c416469bc393fdcc066ebb0b9","sha512":"21e6dba6abefa8807f7f3b961bf3cdd8cce7182ff27356593d0fff0550a0ac91a325e9d791f7bcb5ffa545a686f7226740a342e61d78592de61c360358136553","ssdeep":"","tlshash":"314173592cb44424e30310669ebad3fcba1532293b56d333b8beab485f44f464d625fc","first_seen":"2025-11-21T05:29:38.220028Z","last_seen":"2025-11-21T05:29:38.220028Z","times_seen":1,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/splb.script?v=1763702949878","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/splb.script?v=1763702949878 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqZo4P4fIry6rOwu97JizQ%2FxOpcdpkbbVztbnWsF4BCjNKT5fph0HtPROwWV2tji1EdxCuXxDEYrcW8A5zuDVB%2BkkBbYpryl5JDwbKlJ\"}]}\r\ncf-ray: 9a1dc9acdd6b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (449)","md5":"d74f18b4392137c67a5f3355e0a9a815","sha1":"6d001db051a063ff6b045663971ef5718c0a08e5","sha256":"482bccf3640868636e290501f6c3921dcdc831e1a485ebc71f1c32f7ad6d6bd1","sha512":"cb43842adfbc4d09a70f0d6a19db0feccfc254f1bd60212c005be172a819d908786040fe04aa688815071895db1e419c7e8489cb40c0e4bc02e6f1599bf8d742","ssdeep":"","tlshash":"b321334c2de5d424c71700511977e2fcf668302829a8d302c89ecd093f60f66ab3acdc","first_seen":"2025-10-31T01:37:25.583908Z","last_seen":"2025-12-11T01:13:12.119463Z","times_seen":2369,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sp0.baidu.com/9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.tt6ild.top/","fqdn":"sp0.baidu.com","domain":"baidu.com","tld":"com"},"ip":{"addr":"103.235.46.102","port":443,"asn":55967,"as":"Beijing Baidu Netcom Science and Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"baidu.com","organization":"Beijing Baidu Netcom Science Technology Co., Ltd"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 09 Jul 2025 07:01:02 GMT","end":"Mon, 10 Aug 2026 07:01:01 GMT"},"fingerprint":{"sha1":"21:BF:66:0D:67:BE:7A:7F:49:48:05:30:F4:7F:09:F2:30:36:CA:63","sha256":"0D:82:2C:9A:90:5A:EF:E9:8F:37:12:C0:E0:26:30:EE:95:33:2C:45:5F:E7:74:5D:F0:8D:BC:79:F4:B0:A1:49"}}},"request":{"raw":"GET /9_Q4simg2RQJ8t7jm9iCKT-xh_/s.gif?l=https://www.tt6ild.top/ HTTP/1.1\r\nHost: sp0.baidu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 0\r\nContent-Type: text/plain; charset=utf-8\r\nDate: Fri, 21 Nov 2025 05:29:11 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":2545,"timings":{"blocked":1108,"dns":376,"connect":244,"send":0,"wait":315,"receive":0,"ssl":499},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tt6ild.top/t15p20250605v31765.html","fqdn":"tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-21T05:29:05.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /t15p20250605v31765.html HTTP/1.1\r\nHost: tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 21 Nov 2025 05:29:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.tt6ild.top/t15p20250605v31765.html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MPc0wt%2BVqanwmzyK8ITG4WdUHwTyYVz7nMKwsPIIaq3QWIoEHeMG079cOHhgQsmJ%2FuvsIrbbh4mboaf2p7QB5oVvyc6PCk3s\"}]}\r\ncf-ray: 9a1dc9908f0656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70098,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":884,"timings":{"blocked":345,"dns":328,"connect":1,"send":0,"wait":194,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/t15p20250605v31765.html","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-21T05:29:05.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /t15p20250605v31765.html HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATi0FjnZp4ceyfUfqcXmAl9%2FE3GwzsKuyFg%2FiPNLcV54Z1N5lQ7RA3K8XwBFGZrvgGJdzGpXmyja3wS%2Bvd7n15qLTbHjNf%2B%2FSB3ROvKa\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1dc993bc224e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":70098,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65132), with no line terminators","md5":"7ace1d0ae05b148e468ba3a27aea754d","sha1":"b7180be9a062b43a9b7eaab8ca515f23911def43","sha256":"1d1fe502d83a5c43f4167e02d132aa6b6204a88080ad84dce6e3015d20f956a6","sha512":"af14c672aa8314d2a801d6ab342bfefd43844cbcc9a78156517c7d5fc638c7051a663933915627da49f9b949f22611a0892c4b4ce957275c623130b4f6801550","ssdeep":"768:k7mtDzwA6096hsMwcOEeu46oVq8qK4EyYov4aE1NR+0gz:qmhl6y6k6qq024aE1NR+0gz","tlshash":"2963c35293c4642703b445cdfa34e3b4a50373e48e276e127eef2ee699e6e52580274f","first_seen":"2025-11-21T05:29:38.221263Z","last_seen":"2025-11-21T05:29:38.221263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2996,"timings":{"blocked":308,"dns":0,"connect":0,"send":0,"wait":2687,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/css/iconfont.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/css/iconfont.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187b-ebe\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypusNBsLT9TJzoNNIv6rQzZ4fMlH7kvMZ%2BOBN9ogt1ytUl8AyOJuwlzDOuRPInbmz1bYJu%2FtJztra7sbE1svUEKCxmTEKrtF%2FUsIfXB0\"}]}\r\ncf-ray: 9a1dc9a59cf54e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ec69d21d62dbc6bd4d75e1cbf8ea7b62","sha1":"03f42de0831c304604972c0324c94943fbe6e474","sha256":"220bd2af147cba81cda216027ea5ce595506cc7ec441deec0ae82b8f3a17ee36","sha512":"27420cf9156e0b3961a47db65ad334591355d07a14102f72ef359dc4e1738075290d4b4396dc20356300d792baa0f0fbabe7174cb5e2ddce31eb5262b693ffdc","ssdeep":"","tlshash":"f971dd9099bd1cb01308d4d1234bb604ef19b2a69d864c5ff697fe8cafe33045092adc","first_seen":"2023-07-02T06:32:16Z","last_seen":"2026-02-24T07:54:41.814966Z","times_seen":11103,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/jx.html?url=\u0026pic=","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /jx.html?url=\u0026pic= HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FNMnuvwM4M5u1JLCzldQiaVh9zbvct8vvBrnGY2iITaW1HnbhR5TrsrZSf%2FW3hvebBdy8h8HHcTDfTqd5UR1xASoFCURW%2BmRIbWj2JY\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1dc9ac6d624e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"DPlayer","description":"DPlayer is an HTML 5 video player that supports pop-up.","website":"https://dplayer.js.org","common_platform_enumeration":"","icon":"DPlayer.png","categories":["Video players"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5cb0a639f9677cd80233b9548cfefef0","sha1":"3d52db92f0e907d88389307c38a1189286068efb","sha256":"d64c56e524b6234a566a1166abead5fc7bd72fe9a7598e1df759d292add9f9c5","sha512":"271b39fa3b052df53eaf3f053e8b60cc64a2f3a57aea7acdeda270162a640e658886c2859e1e149663c0cee11072343241799d78c8f6c940b0722d1434fea314","ssdeep":"192:HtyLwrxuuUYvnW7HQw+3LaDRbGu0TzDqyaPgvBvZuy/TiYYiskEXiQau:HtKuxtw+bi4xSgvBvZuYTiYYigic","tlshash":"5902c8002aba4025d053c04e6be72728337048036507dd64be9e759dafdaadfc9f6ed4","first_seen":"2025-11-17T07:23:14.687564Z","last_seen":"2026-01-26T07:58:51.594008Z","times_seen":2650,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/css/txui.min.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/css/txui.min.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187b-62a5\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGfNL5olVoYUT8f994Nqy2oqaboQ4yyuuY9I%2BuaVW8%2BU4K2arJAgJT1G0iaT1A%2ByyaJxD3BWb4gkxDDPqzJ6e9XR9Te%2Fo9Qr6QqkdwBa\"}]}\r\ncf-ray: 9a1dc9a59cf94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25253,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a1333d6e3bd1a4daed91c4dc4507935f","sha1":"c2886ac7c8d707bd6a764aac3225133315bde2b0","sha256":"fbb85f8d2bfaa8cad9c2ff625e42bc253ca9d4a52c6521fa09cc5faa3018c918","sha512":"082dc55c0d3e93ee53a7277d082200b2ebae3447a68a87dc8f9423e81546601ec18c1286764b3f0d9aee390383a7618fd5a2d1739c79e3dc7699012aea872616","ssdeep":"192:3za71Ub7MGYZYbA4BtsQgLNciAb40wCC2p0izVzkZKMc69V2qc3VF8Ty62on5lIg:3c1/qCQoNciAb4DCCG0wA9VDTWo","tlshash":"d1b232669f122808801f89d8df596ba98f7544a35f4f4eebe8917c28c3cd95404b3ede","first_seen":"2024-10-21T04:32:00.804369Z","last_seen":"2026-02-24T07:54:41.8133Z","times_seen":11016,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/img/logo.png","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/img/logo.png HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLALQmMGM7hmLdTdJyzSv%2BoottUmbmn8e9lY%2Fmsakz2mFh4lm8uYaDBsxdL8bL9ID7J3K1GNb%2BgZdBAQlajHcHCirGw67QLuG5IgLxBn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1dc9a5ad034e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit/color RGB, non-interlaced","md5":"e7a66846932ad8d65f77f3e4d3d4718a","sha1":"b7d29ef897a6c6646c66d9825604cc296f9b6cda","sha256":"009e6257bcdf53c680fc4df8ed2fd9cb387c9715f38d5e787127b8176d4b844a","sha512":"0a2580cde862605561fa3d81f7459a76b3603a25a8588b3697448344a05ddc1232b9e5d41557732eec64b29fdd5f7e43cf0dce32c6780c3ddadb063b6245b5c7","ssdeep":"","tlshash":"3d21cadb80c1033c752b786c8592566d6613db6d06529ecc17c3b249f3d50329d6d151","first_seen":"2025-09-23T07:42:44.702482Z","last_seen":"2025-12-29T23:52:47.887381Z","times_seen":96,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":994,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/dingbuwenzi.script?v=1763702949808","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/dingbuwenzi.script?v=1763702949808 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FO2910Nw4a%2FMW3veiGABRuphvHUGTYd4WBZyMrka%2F4VF2xUQP8YQ5Tqtfho8FAS0ctjvpHPiGN%2BYDc2Oh%2BHEvuSu6m9z30yB5qScg0Xn\"}]}\r\ncf-ray: 9a1dc9ac5d5f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1289)","md5":"654797af8b1f3afbdcdccb2e23eb7885","sha1":"f1ad85dbbbe1c497fcbfe3d01e742827edca02bc","sha256":"c30c351b470f18ff1e4e11eeee068743f3ce2b0bd5f677109b00a65ac0fdb41e","sha512":"b94d8267575b027b5ab89904879b9ae11ffdd1ebd1cdd16c6bfafe4ec4d74d83e6f565c82ab878a14af4e6d4b2ed8df3021fe129f5e20640125256f6aac457b0","ssdeep":"","tlshash":"5531bdce9d92ca2c5b974e162ef7f5fea7a470741e8582438416d80c9f4034629395d8","first_seen":"2025-10-31T01:37:25.58794Z","last_seen":"2025-12-11T01:13:12.135871Z","times_seen":2342,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/hls.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:10.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/DPlayer/hls.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:12 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c5bc07-7f9dc\"\r\nexpires: Fri, 21 Nov 2025 17:29:12 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YU%2Fk87TcBAf6YMLaaRNx0iG9HGxOYGm%2Fc0jleBvw5rXQP9ebrNQejTElQYbBHDe6IbudzCrK1sHu47vS%2FS8Xm4pVjflMBGvOxenZMl2N\"}]}\r\ncf-ray: 9a1dc9aead884e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522716,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"40eaec01caf20d16b24b872213971d08","sha1":"21695c49e361daf5afc12d94e027e5931cb81a23","sha256":"94ce929f5bf331329033c50b59401dbab0cff655b604496b35c98fedf03d830d","sha512":"4a79460fb125ff1a04809b1da34eedfcb36c779611b93168636697e51a43970036f6db4e1e7622edd88cdd1cb2b032ed4200046c2a4dfa5dee9e39610e91a635","ssdeep":"6144:sh18rSA8uAfz+pjEZB7PuhuhzxhoTB7P6FkqKxuodHBxibIKf3RDpa4GfROamBhw:si8uI+ZQ7PquFYqKxzyhpfGB","tlshash":"b1b428ad37a5a0164382b169903f5607633e7d0a280dc16cfa2be9d72d7994db03bf74","first_seen":"2025-03-28T05:59:35.572888Z","last_seen":"2026-01-26T07:58:51.618048Z","times_seen":8976,"resource_available":true,"data":null}},"time_used":3017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2452,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.autocomplete.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/jquery.autocomplete.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187b-6215\"\r\nexpires: Fri, 21 Nov 2025 17:29:08 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJnX7jF1FwlbHRssBOX2OG%2F3H0gjQFbNHJMNm%2BTXi62G28e0NF8DNe3Zci4DYTjrm2gZ5oQ0%2Bypt2gRhIu5ACje2GGJSYasi67KawHDJ\"}]}\r\ncf-ray: 9a1dc9a5acfe4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25109,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"932466cf2976a99330383be9ffe8ca6b","sha1":"732c55aa5bbb6efb63fad871db9773139929d0e6","sha256":"22a879d897b0c6559e8a4f0e1d7f8866471478740a5b5cace3c29c97c8fdaf18","sha512":"e1ea60c13642bbc8ed8cd448007d5096c4067596b1fee2bea55f1fea765bab59f97f92fa973bdd329ccf78087be301325b14a206592a76c3699128459559159b","ssdeep":"384:EC8MJlHqBlgr2qMrLXej2Jy7fwaoSXo0TviE:Ed7Dr7OtZTqE","tlshash":"d3b2ec0979e3226292a7707e8faf0008b676a557240cdd50bd1ca7d02f54938b6f7fe9","first_seen":"2023-04-07T04:49:34Z","last_seen":"2026-04-05T13:40:27.598121Z","times_seen":20015,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.lazyload.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/jquery.lazyload.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187c-8b8\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XivArQa5Dcx6UXLb0EvzoYFx9yTavRmspKpIpMUpgNC3lUiAkLzv0kPDOu2wLncrMQRz6VsQmiTYJWGIwUdDa%2B6m1opBF3Ai24fpMtcp\"}]}\r\ncf-ray: 9a1dc9a5ad014e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2230)","md5":"9dfc308833c7ae64a6e0e6bd33fb51d7","sha1":"527e4dbceb22c063ed1bc5bd2ec362d9a412892a","sha256":"f3a5e91219434ff92ae7b36b9582136a75f56b605ebeb54bac21efdfea4466d1","sha512":"383aec26af4153c8d03cf7ab898378d5be2d509fcc12e87daaccaf2a51f145ac57b08c3001db895ed95b24e807c5290d256e5570a519b2c478185b9472d27578","ssdeep":"","tlshash":"d641e5863f027534f179a9ad430f52096127d03b92d58dd1b089d8ecfcf86579a3698b","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-05T13:40:27.60355Z","times_seen":18879,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wap.yandex.com/indexnow?url=https%3A%2F%2Fwww.tt6ild.top%2Ft15p20250605v31765.html\u0026key=xqupdxiq15qtps71ena8ku0ykd5g35p4","fqdn":"wap.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.55.88","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /indexnow?url=https%3A%2F%2Fwww.tt6ild.top%2Ft15p20250605v31765.html\u0026key=xqupdxiq15qtps71ena8ku0ykd5g35p4 HTTP/1.1\r\nHost: wap.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tt6ild.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json; charset=utf-8\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-content-type-options: nosniff\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-yandex-req-id: 1763702950960222-12861897034531196591-balancer-l7leveler-kubr-yp-sas-164-BAL\r\nx-xss-protection: 1; mode=block\r\nset-cookie: is_gdpr=1; Path=/; Domain=.yandex.com; Expires=Sun, 21 Nov 2027 05:29:10 GMT; SameSite=None; Secure\nis_gdpr_b=CMfFKhCQ5AIYAQ==; Path=/; Domain=.yandex.com; Expires=Sun, 21 Nov 2027 05:29:10 GMT; SameSite=None; Secure\n_yasc=G2G5exA+MPFsjEsaestxS8Ujq7ujOi8VKrKTN4qVXG2+lL30ZAG4pMNiK5jfQg==; domain=.yandex.com; path=/; expires=Mon, 19 Nov 2035 05:29:10 GMT; secure\ni=4/NEJR4/Av2fGlTF3uW6DXayImGjrIQvaglxClX1XO7FYfp0nob/tZ+QYgjyY3ptX9LJvzFM5HNRAwbiozN1oC9bOEQ=; Expires=Sun, 21-Nov-2027 05:29:10 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1311965911763702950; Expires=Sun, 21-Nov-2027 05:29:10 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyashr=9203019251763702950; Path=/; Domain=.yandex.com; Expires=Sat, 21 Nov 2026 05:29:10 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YKbx/8gGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 26 Dec 2026 05:29:10 GMT; SameSite=None; Secure\r\ncontent-security-policy: default-src 'none'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":124,"dns":65,"connect":46,"send":0,"wait":218,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/css/swiper-4.2.2.min.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/css/swiper-4.2.2.min.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187c-2c89\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ptx2Ba6aaIt%2BkvtRaVoBUu%2FQpSLvGHs69JsNLKq6vko7hwn7I%2FY6Mle938%2BFM3jQg6Jd%2FE40yGPEeJMirlz2cqBFwUkvdqNdHCPtytLj\"}]}\r\ncf-ray: 9a1dc9a59cf84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11401,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11144)","md5":"131683e6e4c8f03227031ee0d9f94f25","sha1":"35fb6182a6640505a307c1c8093811f3ce86a8ae","sha256":"0e93af03a3b34c386d7a52c8fa3f20a7d7c7b060e9d951575fd29db506a99260","sha512":"d1b27264b64829798a4edcdeaf35acbee9aa5b6b36526c1865e842e48a2d5106f08b99067f47ad5e38a3b96bd9b746d21d36e72608554e8a4347e7ad2315b18c","ssdeep":"192:tT7GOgx9BUSdPzX/M/XCj8Fif65W/1mXA8wBLJHpx:tT7Rgx9BU0A/XCcif65W/1mXA82FHpx","tlshash":"9232e15417403837f3b74f2e46a1e7b59b60cc838a934daeb2c0dd44d6fa8b9121eb95","first_seen":"2023-07-02T06:32:16Z","last_seen":"2026-02-24T07:54:41.82548Z","times_seen":11143,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/jquery.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/jquery.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187d-169d5\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OU9dFzq029nWqkYXOvkQ4e52jj%2F%2BO9rfnNhDIWFfRvCtGPC%2FgBWn6dmWUUfwNifxdmfjKzboubS2LrhD%2FIo49lkufbS83uVMB%2F6xzNJX\"}]}\r\ncf-ray: 9a1dc9a59cfd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-05T14:39:21.180175Z","times_seen":60717,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/dingbu.script?v=1763702949807","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/dingbu.script?v=1763702949807 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20DuWhoM1xx4reMYOiw4Xv8JkB%2FAn13BidRyF5aT9NGtoJPtIjjoSESGmKK7qFWIX5xlIJjEuZzN2G2A9wDYdeRu1G2iqs3jq6GXi%2BYi\"}]}\r\ncf-ray: 9a1dc9ac4d5e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (339)","md5":"143ff0ab53eb40cd0808b4624507a154","sha1":"169445820a3be6700a5db2b9f016d45ee5599968","sha256":"58a34be26e9af2877577abe1e8cf9fb263c59894d961aa3009167fad9e9bc2a5","sha512":"f2816f974b99bd6522ebeffb23fcb7394fdfe311639a015cd05e44f6a483879546e0dd75750778d6fae88f2abf5cfc1ecf4762d61627ac6c9dc4cc085b515f79","ssdeep":"","tlshash":"1601b18c1dd1b478e65a48322dbae5bd7a3811243a89c2019c1dd81c6f647a95a76dcc","first_seen":"2025-10-31T01:37:25.580091Z","last_seen":"2025-12-11T01:13:12.13504Z","times_seen":2346,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/img/6578282244367.gif","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/img/6578282244367.gif HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 81625\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\netag: \"68c5bc06-13ed9\"\r\nexpires: Sun, 21 Dec 2025 05:29:12 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0a550mAg7IT%2B0m2Ee5YhFCe9B9F%2B4mah0LSz00oU%2B9lKGl%2FocfdM2ccpNrFXrRZJLEB05sAeVZT9rPZn9voWKmrjFJqdEjztosuTtDc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9aead854e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81625,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 90","md5":"04e189f7f76e9e3cecf2217859c746ef","sha1":"ee9b0947d689b0bbe99e72eaa4175d5209f106e7","sha256":"38a47b5c2f0cb7055f0c7e13d9c2a6ef79734d8a9954c184a081c045547817f9","sha512":"944a9a65397bf34b68ab3b05b9dbf7648105cfeed86b8547257ec62fcd6ecde4f6395eff85624a7a56e4c7d58ab48bbfafc3732d918b3c2633f1c1b197a17f42","ssdeep":"1536:tfW9luqv41t2HEZn5Z8ukmeo6HuM/XxSg6eoV28m4C4/g23bJwvCAKf+:VVqQ14HO5Zne7HuM/tq28ZCGg0Wr","tlshash":"a583128debcce7ec8d9f0e5a25bb06a66c890e0d19e7e8c684fede4494d4045210cddb","first_seen":"2024-06-13T08:04:43Z","last_seen":"2026-02-05T15:06:38.583313Z","times_seen":8435,"resource_available":false,"data":null}},"time_used":2784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2444,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/js/js.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/js/js.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187d-12b3\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPLD%2BamiwaEGXs1LSMxjh7U0cw%2Fh9lOvczIGY4twDALFhXr425K4D3bl%2FEtOpL%2Bh1B3s%2F0dTy2glxdBij12Tb9JH0oX2XFx%2F9diIfzmf\"}]}\r\ncf-ray: 9a1dc9a5ad054e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4787,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"92ade2d512b3981f1041c2ae3e9ba05e","sha1":"eb7073f4d643633d67b1e924d8d0046b2a64207b","sha256":"0967563fe34912f4a673c6be88057d276f23c892325e91271d97c54260031627","sha512":"abe7064dd0c55c34edd7ea873c029c1dc7341f65d87766d30345d45292d3e79f9d311f1062c0c67b77790a5d37e39a9bd07a4cc929fafd1dbd5fda07f8422cf9","ssdeep":"48:QPHizsoUdDOMSZekZTMucMGk5a+zu1H+ORPiyi7i5iIp8GvyU/5/i/WBbEbs8ib/:PZUYRf589H+OR/8G99r4ReEPi","tlshash":"e7a11f4af1a535651437363a0e7f60043777808ba88dee90f84c49e08fa923c55abfda","first_seen":"2025-01-01T07:40:20.941475Z","last_seen":"2026-02-24T07:54:41.804961Z","times_seen":10893,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/splb.script?v=1763702949832","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/splb.script?v=1763702949832 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxFBwvz277r3jpOnbVosA%2B0HRIyvayU4wV44SXzk562T7noybB7XV3n9bJDZO6vOZfxbAMmPKqXt5By76skAVn9r7gFqWgdzWgEccLG2\"}]}\r\ncf-ray: 9a1dc9ac7d644e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (449)","md5":"d74f18b4392137c67a5f3355e0a9a815","sha1":"6d001db051a063ff6b045663971ef5718c0a08e5","sha256":"482bccf3640868636e290501f6c3921dcdc831e1a485ebc71f1c32f7ad6d6bd1","sha512":"cb43842adfbc4d09a70f0d6a19db0feccfc254f1bd60212c005be172a819d908786040fe04aa688815071895db1e419c7e8489cb40c0e4bc02e6f1599bf8d742","ssdeep":"","tlshash":"b321334c2de5d424c71700511977e2fcf668302829a8d302c89ecd093f60f66ab3acdc","first_seen":"2025-10-31T01:37:25.583908Z","last_seen":"2025-12-11T01:13:12.119463Z","times_seen":2369,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/img/6558c076c4759.gif","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/img/6558c076c4759.gif HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 301334\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\netag: \"68c5bc06-49916\"\r\nexpires: Sun, 21 Dec 2025 05:29:10 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hE%2FJpCpEz9B66IW8m7o9QznrB2CqAfTQt7eL3XB2equ8u0bJMT9w3CHwpRJhh5kLIJu2xBzbZZbNUJIcmHk6RKOAfPKQpKKvcCgP9Fxe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9aead864e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301334,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 80","md5":"c0107a89e4b289e2f05eac0745f2b609","sha1":"da50fc944d7999a83757290a824fce9ab9364c97","sha256":"66688c9216b22bc570c70fdb95666b6aea432fb565dc501ec87e2900c77e49bc","sha512":"3723224a94d9da507b720faaebe267fec52c3654442f2a3540d2db1b884122f3f3c6f3b167d049998c5aca16550f73c38a13311fa64a8b3bb2ecf2170a6954b3","ssdeep":"6144:v0wsfdCGe60GnxCGe60GHfVjhgvcuaeAbXDAbqOtUeDjFw1:VedCGeJGnxCGeJG/JYcleYXDYqGDjFw1","tlshash":"265412572f29f5ca321afb5174a51660026816dca2bdf37e01f833a3de07206fa54bb5","first_seen":"2024-08-19T15:30:49.712636Z","last_seen":"2026-02-05T15:06:38.582678Z","times_seen":8433,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":666,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/DPlayer.js","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:10.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/DPlayer/DPlayer.js HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:12 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c5bc06-4a577\"\r\nexpires: Fri, 21 Nov 2025 17:29:12 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgLUw%2BYvTTnWLQGkMa3VtJ1pA23jFSv1Rlhmzwlv8ibavkdBM5pW7QGuv3%2FGQrj3qlJqNYfP0ZF3ORN1RjGMXo2q5PErVTIeyT8xuYT4\"}]}\r\ncf-ray: 9a1dc9aebd894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2053c6161b97bbdb9cfb085689e5f2a8","sha1":"efdf49a6c1023d835e8818104400827699afa2ec","sha256":"75186678ce237b8c050e8ccfa67980f7cfb921293fd9038e265faebe02aab69a","sha512":"0237f5f101aabcaf9ff3dc6de15c23e14ce8b2fb216066deadfc01df2737f17e9dd10ca20a8341072f4ee8efcbbefd979ee755c62c3dc8045de9a2b5072db47a","ssdeep":"1536:nFri4r9aKySaa3rzg7hSwaKySaa3ref7j3MEwOMEa8vTDadMcBjOsCSwixK1LzVq:vNDyMgjKbixKVhjLIR2INivLS","tlshash":"7254b20b364131340262afe8c6db534a36347311e9728729f65ef9de8f9d84c6427b7a","first_seen":"2025-05-09T11:16:23.839815Z","last_seen":"2026-03-22T19:29:37.089015Z","times_seen":9058,"resource_available":true,"data":null}},"time_used":3102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2381,"receive":721,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/jx.html?url=\u0026pic=","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:14.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /jx.html?url=\u0026pic= HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjG5Mjyx%2FKrgWDzL1Q%2Bq8%2FolvjVkoPOLmQQg1GhqdI2fYHHtC9UT4JOW6s%2BIEUm2nrYQPpJ%2BGOhSdRLFieijYGLax%2FPxzRWJHw%2BTnbfJ\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 21 Nov 2025 05:29:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a1dc9c9a8454e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"DPlayer","description":"DPlayer is an HTML 5 video player that supports pop-up.","website":"https://dplayer.js.org","common_platform_enumeration":"","icon":"DPlayer.png","categories":["Video players"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5cb0a639f9677cd80233b9548cfefef0","sha1":"3d52db92f0e907d88389307c38a1189286068efb","sha256":"d64c56e524b6234a566a1166abead5fc7bd72fe9a7598e1df759d292add9f9c5","sha512":"271b39fa3b052df53eaf3f053e8b60cc64a2f3a57aea7acdeda270162a640e658886c2859e1e149663c0cee11072343241799d78c8f6c940b0722d1434fea314","ssdeep":"192:HtyLwrxuuUYvnW7HQw+3LaDRbGu0TzDqyaPgvBvZuy/TiYYiskEXiQau:HtKuxtw+bi4xSgvBvZuYTiYYigic","tlshash":"5902c8002aba4025d053c04e6be72728337048036507dd64be9e759dafdaadfc9f6ed4","first_seen":"2025-11-17T07:23:14.687564Z","last_seen":"2026-01-26T07:58:51.594008Z","times_seen":2650,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/fonts/iconfont.woff2","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/fonts/iconfont.woff2 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 10876\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:28 GMT\r\netag: \"691e187c-2a7c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kabVey28ljjf0o2XAz2C8ceck3xurXDvuWynBg3XNbXNTpQNaGZMhE2DDcXVlvDnerExG5Eg2nJpZq86I4pGXhfy52W%2Fs92B5SJOf1gG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9a59cf64e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10876,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10876, version 1.0","md5":"5cee62397340d544c6f4409b4cdf2d34","sha1":"a20be023205adc515a20e53ad2a2eddb7f7b18bb","sha256":"2d51ecb92cd7115a3a6233235a75543e7d819e9d13c605dc3b66eeefc49b712e","sha512":"748d856e39c7f91db44334ff44f2e6c4647c3690755c1ef3009870d43ce05ae06791b3f4c8195b5cc05cf5fa91e3b8567757d39abc5e33c2b860f42a207bc105","ssdeep":"192:/vWbvjfCdev5N/GkBlCDUTMU5V9fxz0P6mw/ETEQHX2/5MQ8tGMtcNGpmquwfhKY:/IrCdU5N/bBlGUvV9tISqZm/5WtGMtcg","tlshash":"ad22b0468a3d6d689df0c07234e74a6d59dc69768a2fb8cb215371c3ade3e82c781849","first_seen":"2023-05-21T14:25:01Z","last_seen":"2026-03-26T02:20:02.125722Z","times_seen":11800,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/template/default/static/css/style.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:08.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /template/default/static/css/style.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 19 Nov 2025 19:20:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691e187b-d5cb\"\r\nexpires: Fri, 21 Nov 2025 17:29:09 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZUXccx00dR8eny0llDMk1ZJX1BZEKR9XY5zWYQxWUm3a3%2BOv8Cpj2OqsBHSUkXCyhZ8Y2Gu%2BvsCBKzl4CHewYtEv6GrNu8LPr1hD3RDE\"}]}\r\ncf-ray: 9a1dc9a59cfa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54731,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"83d0b2c4b0a5cd7a2a30b1cb5eb8060c","sha1":"8e9700e544dc4f251e1856d1ab88a1f7ba64d2bc","sha256":"5da0a07b5d87f2fa9a57da9cf091670858bc913be860d72141f9979e6bbc2d24","sha512":"8234f0e575ba496841f60472571a458c50d2fb498a3862ab52f6adf8f7e477229e8faa40c2a5d2bda512a0d4a8d2672f327270627835a9547ca646fc96f2b997","ssdeep":"768:EYW8FtzzfFDzFQJ3MHrymUJFkFpFzrm5pnt0uGG:ESL3xz2J3MHKJiLprm5pnt0uGG","tlshash":"7a333261d7a3198a740fd0681fb9974423398083990ecf6d7fde71a88f8e198a473bd5","first_seen":"2025-01-01T07:40:20.953461Z","last_seen":"2026-01-04T21:07:41.178872Z","times_seen":7256,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/ok/flwz.script?v=1763702949810","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:09.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /ok/flwz.script?v=1763702949810 HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 21 Nov 2025 05:29:09 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icpqSG7QC2fJ7xsAxXt4j7k3zyJE%2BqkzDHjX9zF5GuBbn8Fd1NrSRb5JqNG9%2B4l2wph2ww2oL4PqkyAaj6BHcpaX9xbaTcHGR7YsVeso\"}]}\r\ncf-ray: 9a1dc9ac5d614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (594)","md5":"497cb428c62cd42e1867e3c2767ca315","sha1":"973082bff60a7df9ac4a6d863b16df0f23ae6082","sha256":"e276926ee249409885de9d68fc2a12286f5dd1c27b5e9b6ea6eb5f86c992bad1","sha512":"19c04cbd63b5cc301ee47f369d6459d2aaa847a7d0a35b987e3864c41afd17a8d843b6166891f9639fc85180a61aca3853e3eba2f49e591ab3af34ed77088fac","ssdeep":"","tlshash":"5021f18d6d90a425db2b45292d7fe2fd73a830781dc8e352485bcc087fa07826f298dd","first_seen":"2025-10-31T01:37:25.588756Z","last_seen":"2025-12-11T01:13:12.146251Z","times_seen":2344,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/img/6507dd601b9dd.gif","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.tt6ild.top/t15p20250605v31765.html","date":"2025-11-21T05:29:10.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/img/6507dd601b9dd.gif HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/t15p20250605v31765.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 57485\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\netag: \"68c5bc06-e08d\"\r\nexpires: Sun, 21 Dec 2025 05:29:12 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwP8YrMMvajsrOy8uk3s2c2mSnpdJERxajXtqmVxtN0ScrsQ4eXCtGfWs6Yweju48MTqvKG7kcYLBYO3%2FOoFdx9OL4peytYpKsDuMuSX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a1dc9ae9d834e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57485,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 300","md5":"bf770e88499939ea4929893e8e2bed98","sha1":"f424e14d2832cd8a3e6dd5b2d9f7a2bb1d6a112e","sha256":"642abdfaf18dd24429a77a9e41ec058b0f2343188018e48932932b693aba0a21","sha512":"5de5180e51082f5d20e9a1ff3b1d9bc0bf66f49a56d65bf94f820fcd07241e92dc211aafdd0c5dd6e1895e1b626b65fcbc57365ae1e478c04a342e99d5d7e150","ssdeep":"1536:8bplow377DYmh0EIIJRHC6GfyikTgUrrCP69hwBdtm:8bvowF0ExJRHC6xik/adtm","tlshash":"5b4302cb8d3f0d1899f125c0d7b905c40f5a0be6a987394b59f0ef4a0e77a5183e9b89","first_seen":"2025-01-01T07:40:20.956218Z","last_seen":"2026-04-03T13:05:32.960452Z","times_seen":9385,"resource_available":false,"data":null}},"time_used":6648,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2052,"receive":4595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tt6ild.top/static/DPlayer/DPlayer.css","fqdn":"www.tt6ild.top","domain":"tt6ild.top","tld":"top"},"ip":{"addr":"104.21.61.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.tt6ild.top/jx.html?url=\u0026pic=","date":"2025-11-21T05:29:10.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt6ild.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Oct 2025 00:56:46 GMT","end":"Mon, 19 Jan 2026 01:55:28 GMT"},"fingerprint":{"sha1":"A1:E8:9E:8F:0C:CB:EB:8F:34:12:46:88:03:28:A9:29:F6:20:31:DB","sha256":"1A:18:8F:63:F4:2C:7C:2C:94:97:DA:71:05:FD:33:DF:ED:EF:31:2E:6F:2A:69:4F:F9:0B:D7:02:75:E4:12:D5"}}},"request":{"raw":"GET /static/DPlayer/DPlayer.css HTTP/1.1\r\nHost: www.tt6ild.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.tt6ild.top/jx.html?url=\u0026pic=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 21 Nov 2025 05:29:10 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 13 Sep 2025 18:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c5bc06-b0bd\"\r\nexpires: Fri, 21 Nov 2025 17:29:10 GMT\r\ncache-control: max-age=43200\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=he7xEAQnT3AGl7Bb6ZINELvhXxPnCalnkA9tuOZPnLBIKSNLTGx6S10FV422gGxvr4J%2Fi7ad%2FJLDjF2SbDPIFEg1eEdJKU1kfU43ZDm3\"}]}\r\ncf-ray: 9a1dc9aead874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36675)","md5":"67c73f0d70c85c782c12f9e53b8d8712","sha1":"cb2556de1f38d97b5c2d253f37a51d7e3ade2b6b","sha256":"824c65e2d9672abbfcf84a443d5db80754e3e83b32cca7f5ddc6805700823da4","sha512":"4e049d6380bce93a90b6740f214e3d0f611107a51d0e918e6e1433fda4380a13ac4ebdb63d03c1764526f421c530f69e3e37149fef60e272b544c7a6b61577d3","ssdeep":"768:7FK8KSkZqtIfw3YH4ZqtIfw3YHvHYr/hizxdUDr5+0ysGif0y9i:9HYr/hizxdUDr5+9soyi","tlshash":"8113bb1618a5329891225b91cbc8676c6738d312e9224f8ff31b780ecf8e69d215ff57","first_seen":"2025-05-09T11:16:23.798167Z","last_seen":"2026-03-22T19:29:37.030653Z","times_seen":9014,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-21","alert":"Sinkholed","trigger":"www.tt6ild.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}