{"report_id":"7ccf88fd-49e4-49b9-93b5-329bd40c1d76","version":6,"status":"done","tags":[],"date":"2026-04-30T20:02:33Z","url":{"schema":"http","addr":"bot.ylg4.shop/800594.html","fqdn":"bot.ylg4.shop","domain":"ylg4.shop","tld":"shop"},"ip":{"addr":"104.21.5.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"title":"【我的私处 好想被你多舔舔…】巨尻侄女的诱惑 戸田真琴 FSDSS455C -云良阁","dom":{"size":49442,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20293)","md5":"2b4fc03efe08ccbce8ea5d7561839e07","sha1":"d1220b43da2e886213f618d96e021fb31cfbbe3b","sha256":"91a5e2676af71e6f6aa9438287313c227595564c33d2e30ee88c268b5341c24e","sha512":"689639676a4621bb459600f2d5fea1c0da3d07cab5e0b7738aa05cabf493cce52467d02ea920d7526b9643aceb185b8d0e130d12ed1e615590e6db09e13ec085","ssdeep":"384:Z/a9AnBjqI5QV6epLvCJIOnIlKDJjJDLidxFxQtjDTH5E5rylMbMyX8SwIi4K+yc:ZbnBjWV6YCx8gidFQtjDTima/bzhX5yM","tlshash":"0123fb2147e88076211314d0de70ef487976626fdea38b09f1bc7b6dcb4aec26d13696","dom_hash":"domhashb7661b389e42a757eac04ded44666c15","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bot.ylg4.shop/800594.html","fqdn":"bot.ylg4.shop","domain":"ylg4.shop","tld":"shop"},"ip":{"addr":"104.21.5.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T20:02:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"v.ykv2.com","ip":{"addr":"64.185.235.29","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-19T08:59:43.889948Z","last_seen":"2026-04-20T19:17:41.043814Z","alert_count":0,"request_count":4,"received_data":987360,"sent_data":1843,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xm2026.myxuanxuan.com","ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-03-22T07:22:10.524078Z","last_seen":"2026-04-26T15:26:51.494409Z","alert_count":0,"request_count":1,"received_data":732503,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.meituan.net","ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2010-01-25","domain_rank":189994,"first_seen":"2017-02-03T02:36:44Z","last_seen":"2026-04-24T10:10:31.090942Z","alert_count":0,"request_count":1,"received_data":407470,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.mdynieu.com","ip":{"addr":"161.129.35.190","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-11-07T12:04:46.874157Z","last_seen":"2026-04-24T01:02:29.68651Z","alert_count":0,"request_count":1,"received_data":407041,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fsffbhd.brffff.com","ip":{"addr":"172.67.71.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-07","domain_rank":0,"first_seen":"2026-04-06T19:05:12.535352Z","last_seen":"2026-04-24T01:02:29.339149Z","alert_count":0,"request_count":2,"received_data":1166274,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ciz.ylg4.skin","ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-04-29T23:23:45.993785Z","last_seen":"2026-04-29T23:23:45.993785Z","alert_count":0,"request_count":30,"received_data":1220547,"sent_data":14357,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"img.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":61670,"first_seen":"2015-03-04T07:06:39Z","last_seen":"2026-04-30T05:24:14.969017Z","alert_count":0,"request_count":15,"received_data":5400156,"sent_data":7336,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-18","domain_rank":0,"first_seen":"2026-01-09T02:45:23.4071Z","last_seen":"2026-04-26T16:32:49.337595Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":487,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img1.ah7907.com","ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-11-08T09:13:57.808607Z","last_seen":"2026-04-25T14:59:14.478439Z","alert_count":0,"request_count":4,"received_data":631358,"sent_data":1756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"36.158.231.176","port":443,"asn":56047,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-12T01:01:33.916178Z","last_seen":"2026-04-24T01:02:30.846548Z","alert_count":0,"request_count":1,"received_data":568595,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xy724-1.anvnjmc.com","ip":{"addr":"180.163.146.12","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"domain_registered":"2024-08-29","domain_rank":0,"first_seen":"2025-09-06T01:47:58.095855Z","last_seen":"2026-04-25T08:59:29.541061Z","alert_count":0,"request_count":1,"received_data":337193,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dq38rjje7qjm3.cloudfront.net","ip":{"addr":"54.230.245.159","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-03-24T19:11:01.50764Z","last_seen":"2026-04-25T08:59:15.745328Z","alert_count":0,"request_count":3,"received_data":595080,"sent_data":1354,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"txdy.syjcxh.com","ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-04-16T11:13:52.503593Z","last_seen":"2026-04-30T15:03:46.884922Z","alert_count":0,"request_count":1,"received_data":120304,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","ip":{"addr":"36.158.231.176","port":443,"asn":56047,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"domain_registered":"2025-04-18","domain_rank":0,"first_seen":"2025-12-03T14:43:28.608781Z","last_seen":"2026-04-26T16:25:52.003299Z","alert_count":0,"request_count":1,"received_data":596923,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3ccefxs96519j.cloudfront.net","ip":{"addr":"54.192.209.198","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-06-30T07:13:17.425046Z","last_seen":"2026-04-27T00:52:04.444877Z","alert_count":0,"request_count":1,"received_data":96183,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"s3plus.meituan.net","ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2010-01-25","domain_rank":164613,"first_seen":"2018-02-02T02:20:39Z","last_seen":"2026-04-26T18:49:48.540745Z","alert_count":0,"request_count":1,"received_data":588047,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img1212.syhze.com","ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"domain_registered":"2014-05-15","domain_rank":0,"first_seen":"2025-12-21T08:33:05.525239Z","last_seen":"2026-04-25T06:21:22.136518Z","alert_count":0,"request_count":2,"received_data":940974,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"2026tu.myxuanxuan.com","ip":{"addr":"43.175.65.14","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2016-04-10","domain_rank":0,"first_seen":"2026-01-26T20:19:42.17682Z","last_seen":"2026-04-23T20:20:11.461072Z","alert_count":0,"request_count":1,"received_data":643927,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bot.ylg4.shop","ip":{"addr":"104.21.5.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-06T04:52:17.898094Z","last_seen":"2026-04-24T01:02:31.389452Z","alert_count":0,"request_count":1,"received_data":16015,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/player/dplayer/hls.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cfa29933ba9ba506ea73e084de951b9","sha1":"30004f2da2e1e06f671eb2bfda00f8bcbe69b47b","sha256":"0d925ef64b764ee2d8e362ebec98668e5fd09887ec0fb70bd82d121097c40d7c","sha512":"5e7b2ea8fd8b8edca2554f5423cde03bcc8934fb03904259baba2bb9e51ae98af837877ea0223016c71660bbb418543667ecfdfc1b4831d513d57a4ff886915e","ssdeep":"3072:pI5L1S8HY5x1kVQ5ToDOzBPCB2baeBSZ3yg:pI5xSCY31O2oDO15tS","tlshash":"53341c9db661706543c3a1a5803f061a7236b92e7409c1fcfa6bd5f61cb885e603bf78","size":241648,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-05-08T11:01:48.458902Z","times_seen":14846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_jump_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbf9d8d3401742a288e5d339af1bd4b2","sha1":"df3037077c84a4150f1d1a0d94f642b12fdbbf55","sha256":"81f6987545729537b17650efc28fe7042dc7b4cc94f66d0ec6f06414e35711b0","sha512":"849b194301588583e73eaa1d62101dfd1a2be7a3f007881c843379943fe0933676a298c7da5f7ce750d7e7799a9fe9f3d77d62d14feaf364a30c645c6e28a52b","ssdeep":"","tlshash":"19711c5c64d730d32057313a5fdf150836b694032a0ade04bd0d66b02f90b2baab6fed","size":3676,"data":"","first_seen":"2026-04-30T20:02:43.354927Z","last_seen":"2026-04-30T20:02:43.354927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_ui_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc9dab2d6296883994d17cfe04822db","sha1":"661349a8c44f256e9d9dc70b72b6f1fdca1fefd2","sha256":"3d32da3eba33d2b7633d30bcd27b09e557d3db09eda4b6774573b32112c9698f","sha512":"25b861d9de9b0755e6d2bc633595fe63c55fd5b4bc5c6262f9b220ad72f92ba37fbff2cf670aedd6601d8f25314e7c1cc824788f5a558409c724c02a394888c3","ssdeep":"96:QsrFraOuiXEMwEJxg2zCAE1fEWTzg2fCu1JkiTpoP5VYb5G6JS/lWrNOKsKQMX:jB15wim2zCAkf5T8CCu1J45VGGg+gYls","tlshash":"22b1955f79e33096992330b49fff140836369013620edc947c4e91646faab982672fe9","size":5587,"data":"","first_seen":"2026-04-30T20:02:43.302874Z","last_seen":"2026-04-30T20:02:43.302874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ea66ed29c3cb0e34f16163e2f6a6a09","sha1":"2354bfa23fa21d7b441411e822fa92ebd2c38dcd","sha256":"dbd164b1f168323cf0a8265e6dfb67c91c9936febfbc54b26d12e9ca5c583b39","sha512":"76174a41aceae64478a44ee3e3f3d9c4fafad1d0b7d06096bb9fec2ec480fd7f9006a0f81ef4d3a38238f93f4ddfdeb0948ddffca942d8aff35afb38d3bb679b","ssdeep":"","tlshash":"0ea0118b08023828aaa32022880330ac032b00bc082ca000cc02cc8028ba33f820baae","size":79,"data":"","first_seen":"2026-04-26T05:33:14.368747Z","last_seen":"2026-05-01T22:42:17.512337Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-05-08T15:53:09.51705Z","times_seen":647427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8bc2a7dd732f9ce1988bad2c9a7bbc78","sha1":"886bee1743f716a22dde74a721e0fb0b306ef580","sha256":"ebcfed24d2f6606f7c9d22d1af5a6052311b6cb9010319070c155a855c6b3cd0","sha512":"2a2b59afcf2700726d0d0d5a8d85a21e633eb8d227c1d61277f478f0fdd6a6cca59a453c82856e495963c395fe33d453effb14ae898f7459d4fcf3e205b7517f","ssdeep":"","tlshash":"a60120272e5830b28f8670e5aa9b594435339a00328092e5ec4ee42881f1cbf852b2cd","size":773,"data":"","first_seen":"2026-04-30T20:02:43.368859Z","last_seen":"2026-04-30T20:02:43.368859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"db7d0637b30da74f86bf0b3bef0079b3","sha1":"e3388b92257094a38cb647c13136470cfe5f7507","sha256":"341000fad6bd09ca200e8f17737b1a9990c425dfd72fe359ffa0ff6d1792b664","sha512":"1a5339ef941ce5d0679019ea9675c52700ed49d0d547fda27c1bd2945d6934a842fff834abcfab886be5fd97889963298370e8d1d2d85834b83f24a0df7e8512","ssdeep":"","tlshash":"7ac02bf2592e934e0f27d5acdf285a43e79903841e04200570505f1d81406035258e10","size":138,"data":"","first_seen":"2025-10-01T16:58:36.15746Z","last_seen":"2026-05-01T22:42:17.515Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57ca1679beecd06eaa00944bec96c8d5","sha1":"90d2c545a94b7fa7ea2a0bb2e79d47db91cf7164","sha256":"7c766318d776596c427c9707337cc501d4a06a8186257b80a24d129fc3b97d42","sha512":"971021ae72ea21612944d42c4b9048028e447eb31df65c34a3311c1a6246773b9d8465eb20cb52c6b34099d5a7a714d791cd2eed9323764eed0b3addd104aa6b","ssdeep":"","tlshash":"27e07d9a8841d2e6d986b3bbffe0d368e8983b193817d83207101cd6221336fd446b4d","size":332,"data":"","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-05-03T01:50:52.915937Z","times_seen":9786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/layui/layui.all.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b19485072bfc794647851b26f1b7f266","sha1":"a67a6f9b741c072cc90a1728981b8fa4e4bc3ead","sha256":"dcf2490b233e3f1a0f271d8ffb0ea282e8db1b1681e128bd46f3a2b820c25578","sha512":"af352787f719d43c0c9ef45bf895e46221ed612b4531daf9dd0f9386c6212b704d427f067ca215007bf4c251003f0db4dba8cf268410cf2337a45bbe2457b84e","ssdeep":"6144:2+lP9uiSF0Mz006Tfrf5lQdQzsGjBeEnn:J8ErXQdQzsGd","tlshash":"7b44499cb58174b3237320a6405f950eb2b7196daa0e8010f166d4f66cbdc89527bfbf","size":261285,"data":"","first_seen":"2023-03-08T06:50:22Z","last_seen":"2026-05-02T22:59:43.557424Z","times_seen":3081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_ui_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddc9dab2d6296883994d17cfe04822db","sha1":"661349a8c44f256e9d9dc70b72b6f1fdca1fefd2","sha256":"3d32da3eba33d2b7633d30bcd27b09e557d3db09eda4b6774573b32112c9698f","sha512":"25b861d9de9b0755e6d2bc633595fe63c55fd5b4bc5c6262f9b220ad72f92ba37fbff2cf670aedd6601d8f25314e7c1cc824788f5a558409c724c02a394888c3","ssdeep":"96:QsrFraOuiXEMwEJxg2zCAE1fEWTzg2fCu1JkiTpoP5VYb5G6JS/lWrNOKsKQMX:jB15wim2zCAkf5T8CCu1J45VGGg+gYls","tlshash":"22b1955f79e33096992330b49fff140836369013620edc947c4e91646faab982672fe9","size":5587,"data":"","first_seen":"2026-04-30T20:02:43.302874Z","last_seen":"2026-04-30T20:02:43.302874Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/js/bootstrap.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"332744d248c35d69307095bc90bfc8d5","sha1":"1955d2b74ce4918aeaf12db7193f823e3b6a06f6","sha256":"1f37ccd582c84cde6d297ef6a0b88d784a6b3c68865152777c794da3aac579e0","sha512":"300088d846f6f31e0ed3b5b2d606c46e2e1fb364a56dd83ce471ffff857b359fb244bac3f057320394dc274a3e10d421ccd9fb0bd9d70ed67e4fee35870eb3f8","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqzmHC5:SAr2MRCqz","tlshash":"74e29446b23031a107dfb1e5515f020f723a6a6dea06907c38b999e53eb9c48717bf39","size":32658,"data":"","first_seen":"2025-10-01T16:58:36.116276Z","last_seen":"2026-05-01T22:42:17.500396Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6574f9e21fa8bf376e204b3116c8d35","sha1":"e50e34cce5ac7857c8a3c99704e2812819404437","sha256":"f8ccad64a60ac5c54b66a6cf82c40580605a9eadc1c3460fd4be114c97bf6e14","sha512":"a6ec394a6949421f03dd7f8e43e3c664bf07bc2549bf1732fd88e799800b6239bf765422590c57abca1ed952b8633c97b4fb134bcd44d648b9115fbda7ddcbd4","ssdeep":"","tlshash":"b0d0a7298c70e3ea9852e3ddff80e7a1cc44752b364399354350189132270afe54cb0e","size":243,"data":"","first_seen":"2026-04-30T20:02:43.373184Z","last_seen":"2026-04-30T20:02:43.373184Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/000/report_error_video/script.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b9ec7394b9b594781565f4ffc0f7301","sha1":"c5faab0ed52448c2d2af67f89d5c167c32fc9a78","sha256":"aa6ecccaab5ef50d153867b084d7df600be425b8cddea46fa79baba8e61d5247","sha512":"88a2924e5753b36a1eb551101f002b84ffa597617a9987c2c0d7ebc3dcbf832a9b3ed581ed9b5462cdefe3a323c94e2da58074dd2a3542af6bd695febf33b055","ssdeep":"","tlshash":"0a3113bb646f252245ebb15007db7a043531228fa805ed217d3dc7c40fdadb420e66e7","size":1698,"data":"","first_seen":"2025-04-18T23:46:35.112204Z","last_seen":"2026-05-03T01:50:52.710553Z","times_seen":7473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/js/jquery.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-08T15:20:45.628494Z","times_seen":64982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/player/dplayer/DPlayer.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09d64431d4e71dd79e0293cb254a58bf","sha1":"4093ba933f60bd05c3a482433b2f2b4bf48cbd9a","sha256":"9b2262ea70b613bb5eebbd14963a84c8aa3903cf99f2e0fdd33cae11b1f046d6","sha512":"35ca04e32808ccb3dca2ba6702aa21fa9b26874fc8ceeb44d0f11821f39e1f65288ef2c72fccda8fa18248d84ba86a2a9e835e66454e127fee8ba3261fe5f218","ssdeep":"1536:mDLwEEYwSIZLZX9GSzlY6G4nX8yWLo6DJCYXoanq60IsgGvHk:+PwdJ+St+AXGv","tlshash":"28b3d7983394e071029365f4c51f16093232627de986a658b63ceeec8fb8c8d6537fb5","size":114364,"data":"","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-05-03T01:50:52.637523Z","times_seen":12017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/js/loader.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d909f97c03993ae2e5fdd1a20036ee1d","sha1":"8c77f5b0b6d8c5fa6631c1d24bd590f251251783","sha256":"8632e3c03f573e5272e6ce1c884f0c5ebe622e079e93070f2cf1d9acaf7b671f","sha512":"409720f9ca929fdf674263e3a835fbc9d33e9e14313aa52ecb9a6af0b30aff6304f99b77d7d5e196ac547c1e8f3baca9739f7eb16bd19bfdc9e611fa330643bd","ssdeep":"384:dS7huoF7fq3wiyuYWiqv0TPkzsnRQcVtDAqoQjh3lU:6koF7fq3/yuY7P0snzVtDAqoQjh3S","tlshash":"8a62c4ea3ac2b803e67475e050bf004a127bdca77448c4a5f24cd8e55eb8558a6b7f3c","size":15662,"data":"","first_seen":"2025-10-01T16:58:36.056014Z","last_seen":"2026-05-01T22:42:17.491287Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/js/jquery.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/static/js/jquery.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 92629\r\nlast-modified: Thu, 04 Aug 2016 14:39:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-05-08T15:20:45.628494Z","times_seen":64982,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/layui/layui.all.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/layui/layui.all.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 261285\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":261285,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65130), with CRLF line terminators","md5":"b19485072bfc794647851b26f1b7f266","sha1":"a67a6f9b741c072cc90a1728981b8fa4e4bc3ead","sha256":"dcf2490b233e3f1a0f271d8ffb0ea282e8db1b1681e128bd46f3a2b820c25578","sha512":"af352787f719d43c0c9ef45bf895e46221ed612b4531daf9dd0f9386c6212b704d427f067ca215007bf4c251003f0db4dba8cf268410cf2337a45bbe2457b84e","ssdeep":"6144:2+lP9uiSF0Mz006Tfrf5lQdQzsGjBeEnn:J8ErXQdQzsGd","tlshash":"7b44499cb58174b3237320a6405f950eb2b7196daa0e8010f166d4f66cbdc89527bfbf","first_seen":"2023-03-08T06:50:22Z","last_seen":"2026-05-02T22:59:43.557424Z","times_seen":3081,"resource_available":true,"data":null}},"time_used":1017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.ykv2.com/20231126/FnCyBsOK/index.m3u8","fqdn":"v.ykv2.com","domain":"ykv2.com","tld":"com"},"ip":{"addr":"64.185.235.29","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v.dbocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 20:10:52 GMT","end":"Mon, 20 Jul 2026 20:10:51 GMT"},"fingerprint":{"sha1":"EA:A0:9B:8E:CA:9E:C6:A8:96:F6:31:49:5D:A4:47:87:14:BE:65:70","sha256":"23:42:D9:79:2F:51:1F:7F:D1:8E:1F:8C:63:96:57:E9:34:2F:9E:1A:8C:AE:65:7C:21:67:C8:19:F8:FD:49:57"}}},"request":{"raw":"GET /20231126/FnCyBsOK/index.m3u8 HTTP/1.1\r\nHost: v.ykv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ciz.ylg4.skin\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: application/vnd.apple.mpegURL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nexpires: Thu, 07 May 2026 20:02:12 GMT\r\ncache-control: max-age=604800, public, max-age=604800, immutable\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"0c1633f1441aa914844f5190e859cf0b","sha1":"dc8ed300e15758244787cf22571bfd06a2d0097c","sha256":"5e05996b84c9935a1dc4f2c21c533c250de98ada4be97f5f7d39fe6a2f5f5727","sha512":"8ecb6d4279030704e9d1b3d6194cf595c9bddef1d6c1f3a46eaaa938368e7ce4913f71c0300f01c74486250f4e38b8d4d449da4f21cfd0033c51a581bd929527","ssdeep":"","tlshash":"ffb022a022a8a28e8c288280e80c3223b8ba30888ac0002030eac2208c83ca000a82a0","first_seen":"2026-04-30T20:02:43.277427Z","last_seen":"2026-04-30T20:02:43.277427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1114,"timings":{"blocked":476,"dns":70,"connect":158,"send":0,"wait":159,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 458828\r\ndate: Wed, 18 Mar 2026 07:37:48 GMT\r\nlast-modified: Wed, 18 Mar 2026 06:48:16 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.053\r\ntraceid: 9b66a79517738194680598458e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache7.l2de4[0,0,200-0,H], ens-cache26.l2de4[2,0], ens-cache3.se2[0,0,200-0,H], ens-cache1.se2[5,0]\r\naccess-control-allow-origin: *\r\nage: 3759864\r\nali-swift-global-savetime: 1773819468\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Wed, 18 Mar 2026 12:07:44 GMT\r\nx-swift-cachetime: 31519804\r\nback_uri: /imgextra/i1/4183327079/O1CN01ku36OQ22AEsRZ0PcJ_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 5\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322398292e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":458828,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"2b3c4d3731c88099ac4c056d75104f58","sha1":"96491aeaba60f2a58d2c6ca2494aedfbb6c84bfa","sha256":"724db0139f867d89f3b35a6b176c95247d6b044fe208d9a1cb23633886128561","sha512":"1926c9d95c25246789b1bcff615f6211978b72ccbe733bfdcf6937fc646fdadc3f55cb1509078d9db52002322fb8328d4f48160cc46d262f19011f01e98ffda2","ssdeep":"12288:Fgxi0zu8avghU0S5kznxmXtnOPVLoJhVqXTJhV4t03JW/vANd:g8CFS5kAXtnsVLbDRM/vANd","tlshash":"d0a42392d503c222a5a97c3b00b0345363bd78ceac5bf158fe6336379fdaf61519582a","first_seen":"2026-03-22T13:30:44.049868Z","last_seen":"2026-05-07T01:19:54.88777Z","times_seen":1415,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":23,"dns":1,"connect":7,"send":0,"wait":57,"receive":15,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 442163\r\ndate: Tue, 03 Mar 2026 08:23:28 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 9b66334217725262078834087e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache4.l2de4[3,0], ens-cache12.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 5053124\r\nali-swift-global-savetime: 1772526208\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:30 GMT\r\nx-swift-cachetime: 28608718\r\nback_uri: /imgextra/i4/4183327079/O1CN015le7R022AEsJ5jGju_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322838349e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":442163,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a959dff57b5058e20b52d9eee9856451","sha1":"f429b441579c13a080de49602a836dc091809ed6","sha256":"b55482457dcd5b1a75ccd8af9902c9d9ccf11451e79300f43b4bef9a94260474","sha512":"cb38c08e2b12d580f0a3425f51b2d1af7914d8914881fd188915ad897d7d150000c7c807edf0ee7c4e003333ae6491a1693f369c2932d220549d896a00154db5","ssdeep":"12288:MbOF/O5B0GXiLvxLv9Qu2R3J0rKuDmQvmQP8AtpW6:sb0xdQJ0zdv4sW6","tlshash":"6c9423bb6dfb9054a8130fa829e7061ccb80de8446ec2a79a9571ff7189872cbd1c855","first_seen":"2026-03-07T00:44:39.681251Z","last_seen":"2026-05-07T01:19:54.875596Z","times_seen":2951,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/4183327079/O1CN01JRmywq22AEszBZt0I_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/4183327079/O1CN01JRmywq22AEszBZt0I_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 477222\r\ndate: Thu, 23 Apr 2026 10:25:10 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 9b66334517769399099611469e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache33.l2de4[0,0,200-0,H], ens-cache26.l2de4[0,0], ens-cache5.se2[0,0,200-0,H], ens-cache1.se2[4,0]\r\naccess-control-allow-origin: *\r\nage: 639422\r\nali-swift-global-savetime: 1776939910\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 23 Apr 2026 10:33:25 GMT\r\nx-swift-cachetime: 31535505\r\nback_uri: /imgextra/i1/4183327079/O1CN01JRmywq22AEszBZt0I_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 4\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793323678420e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":477222,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"fe2ceac52a28193545957e3d16c80813","sha1":"99cd46dbc0ec3319889f01ef991223164cd43f93","sha256":"6574ba9bd7b9d2b7934ef424e20937c95638e8e0f674355b6ab1225c24925fab","sha512":"3046caf1d1a8c75557edffeca37eaac194784f2b3d3f237ba44ee77f6af54e3425596ed5626f37aa3fb4a2ba95725b65c56a461f24179990cf6726842347e56b","ssdeep":"12288:Vy4G9VBoLx84+e+ZUc9PiHD909QfiBpQm4S+jTQQrm5:VC/oL29zj9aC99Qm4MQy5","tlshash":"3ca42293c2aa44c7f961795dc1e2d2320d1bedf1a32d3e40eecaa90636361f5b1b0675","first_seen":"2026-04-24T01:02:52.856927Z","last_seen":"2026-05-07T01:19:54.891446Z","times_seen":745,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/dfyl/960x120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.159","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:15.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /dfyl/960x120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 73637\r\ndate: Wed, 22 Apr 2026 23:48:13 GMT\r\nlast-modified: Sun, 15 Mar 2026 12:16:11 GMT\r\netag: \"a4af497d3fa9565b47fbbd904240a148\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Ydt4RZv5xRAZ5bm4SP6eA9wX3V4iUgV008o7CIegVgMQ3mOoXZJk5g==\r\nage: 677643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":73637,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"a4af497d3fa9565b47fbbd904240a148","sha1":"bba8bf3108373a36b0efffed868a18ceda8d32f1","sha256":"3d7d2941602538e871a8be87cd8ac3a2b456500a90a4c93ad0be91d2e29e3c19","sha512":"ccda254eb262f3f78ee317352db18d0da0b6f326cdccc8c945900a6c0b00db1a2efc46d50ca8b37d87d2be284b2a4fa99c53f1dc8c957305fad3a18aed53ec70","ssdeep":"1536:b+QGvsTkOstfo3spcuoe62zkLTxJfn/uNB42pW1y2zXU7WrANse:EUQPtfoso7Yk/q/my2zXU7W0se","tlshash":"c773123fa11e694ae3c07d947ed2e9b06d9834c49c6893f461d40a1e334cb5a6d0a2ff","first_seen":"2026-03-15T12:44:20.826616Z","last_seen":"2026-05-07T01:19:54.883434Z","times_seen":1993,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":35,"dns":242,"connect":1,"send":0,"wait":2,"receive":4,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"txdy.syjcxh.com/960x120.gif","fqdn":"txdy.syjcxh.com","domain":"syjcxh.com","tld":"com"},"ip":{"addr":"157.185.128.120","port":443,"asn":54994,"as":"ML-1432-54994","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"txdy.syjcxh.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 12:17:14 GMT","end":"Sun, 12 Jul 2026 12:17:13 GMT"},"fingerprint":{"sha1":"F7:11:0D:DB:5E:37:48:00:93:B3:08:D8:B7:A6:11:79:95:A6:45:EE","sha256":"1C:DA:C8:BB:F3:D8:96:F1:57:A6:5E:29:34:DA:40:22:A9:CF:90:8E:05:43:88:22:7F:2D:3F:AB:28:76:39:46"}}},"request":{"raw":"GET /960x120.gif HTTP/1.1\r\nHost: txdy.syjcxh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 119760\r\nexpires: Thu, 14 May 2026 06:06:08 GMT\r\nserver: nginx\r\nlast-modified: Mon, 29 Dec 2025 06:33:05 GMT\r\nvary: Accept-Encoding\r\netag: \"695220a1-1d3d0\"\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: 1.1 PS-ORD-04IO2150:12 (W), 1.1 PS-FRA-01uMN61:13 (W), 0.0 PS-CDG-04gzn111:18 (W)\r\nage: 1432564\r\nx-px: ht PS-CDG-04gzn111none\r\nx-ws-request-id: 69f3b544_PS-CDG-04gzn111_71769-45998\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119760,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"149b6d51518d57a39011a6971132ffa2","sha1":"529eeaead1047e4eddd186cfad5015aa987c4e14","sha256":"72c2db6b6259e584134783af7112131d031638bd29be489d53f58d7db2a8b7fb","sha512":"2e2e211b2e27bb10b1deed4cb4460866eeaff5ae5bcac6a550d7906225add955ad68ae8efdf5133d8fb7783a29d00cb72d170af8305c4fd510b5e3ea5a0a155f","ssdeep":"3072:l/GDzsUvQAUdTbhVQ3VFYDAoY/JJM6jqYm433v1:u4UI3TbKVcYDMFQ339","tlshash":"36c3123b424b4782376d70b07bf1e6058186800eae7a3597a562ca870fb1e7585ddc93","first_seen":"2025-12-29T08:49:02.459481Z","last_seen":"2026-05-07T01:19:54.912933Z","times_seen":5617,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":432,"connect":31,"send":0,"wait":33,"receive":36,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/layui/css/modules/code.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/layui/css/modules/code.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1064\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1006), with CRLF line terminators","md5":"e14a0838a9a4acdf34ced70778a3a224","sha1":"791824930c306db3c9a1584887e24221809f1b4f","sha256":"99059d32164c5ed2843b20b0597fd48ece7a0a2769794811672faae02934fd3d","sha512":"fc0200e52ccda3765dc50b563b298b93c86554600db442adab7767be983e36af59017f1b8f79d93343dff4fbe7fc638663fb483554a3a428d69d52f662467e00","ssdeep":"","tlshash":"0911cc3ba38120197547f22560ecb8bc603c71e7e5ea0e6bff4127abc404c60143634b","first_seen":"2023-07-23T12:53:57Z","last_seen":"2026-05-06T08:46:30.650425Z","times_seen":2880,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/ajax/hits?mid=1\u0026id=800594\u0026type=update","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /ajax/hits?mid=1\u0026id=800594\u0026type=update HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: user_pv_count=1; expires=Sat, 30-May-2026 20:02:12 GMT; Max-Age=2592000; path=/; domain=.ylg4.skin\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [c sSf ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ec635ac3023b87435f53a12db3d64ce","sha1":"cac44f60f596e448396bbf7d3524cb8b52266de3","sha256":"e4e5efb83a966551c181a8abdb491b024cfc78d850d7fa9db71a00d6a5496dd2","sha512":"5b85757153ede69ee3075f834793993475baf02097298cfa6968d8ea89e2d5c116bfc8c1f8c18cc984ef9f1566be0858c81d983797bb3a829710a85c1ccc1b04","ssdeep":"","tlshash":"2eb0124518da02824c452008400c0305452cb0001c01ea064d89d321804d8eb34254f5","first_seen":"2026-02-07T07:20:04.816533Z","last_seen":"2026-04-30T20:02:43.288677Z","times_seen":5,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/O1CN01ynjM1P1rGgfwcNyqU_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/O1CN01ynjM1P1rGgfwcNyqU_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 343870\r\ndate: Tue, 24 Mar 2026 14:27:07 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5839b17743624268935412e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache14.l2de4[0,0,200-0,H], ens-cache36.l2de4[2,0], ens-cache8.se2[0,0,200-0,H], ens-cache1.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 3216905\r\nali-swift-global-savetime: 1774362427\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:30 GMT\r\nx-swift-cachetime: 30444937\r\nback_uri: /imgextra/i1/O1CN01ynjM1P1rGgfwcNyqU_!!2216598935604-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322308279e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":343870,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"fef0001df7cd12239af17e6ce2cc81ac","sha1":"0a01c7d45ebf0d0cc625b6ce561b449b25afc935","sha256":"cce8c1d5d5a5f48e6df8c0339e4a01da2ab42454b51d23b6dc0d0618744960e2","sha512":"d72b333fda141a9e5c1292966e591b0d704e2317328ccd75ed97996791c182c260a543b6282adbb6fb7429f62b9457ccd960042b349de62e328b6d2c0420501d","ssdeep":"6144:skDFXvr1efkuVrBSJVEL0KLIN/odsqTwtZfV0KLkbMHjnFf5n1QL9CFMEk9Vw:ssF/r1dudB2EYKW/o+qTAJCKobMpxn1Z","tlshash":"f77423fe483949d4316b3e6518376eff00e8fe29125962567dffb4e270c482c119b6a2","first_seen":"2026-03-25T11:27:26.37993Z","last_seen":"2026-05-03T01:50:52.483786Z","times_seen":1313,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":11,"receive":33,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11221.xn--gps-8y0gm25n.xn--55qx5d/d/11221?_t=1766049818","fqdn":"11221.xn--gps-8y0gm25n.xn--55qx5d","domain":"11221.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"36.158.231.176","port":443,"asn":56047,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 17:10:52 GMT","end":"Sun, 05 Jul 2026 17:10:51 GMT"},"fingerprint":{"sha1":"14:35:E7:15:D0:69:74:17:04:77:88:A9:C4:73:D4:9B:E4:64:D6:AD","sha256":"7A:77:B5:29:20:D8:74:37:C7:83:CD:B4:18:86:73:6E:7F:26:29:90:C4:5F:B4:64:3D:DB:EC:53:3F:AA:9F:D8"}}},"request":{"raw":"GET /d/11221?_t=1766049818 HTTP/1.1\r\nHost: 11221.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.brffff.com/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818\r\ncache-control: public, max-age=900\r\nexpires: Thursday, 30-Apr-2026 20:02:13 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: 68ec4ad,-\r\nset-cookie: __jsluid_s=0c0345ac8da83a2e5d313b1793643d5a; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1699,"timings":{"blocked":-1,"dns":561,"connect":300,"send":0,"wait":534,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 292628\r\ndate: Tue, 11 Nov 2025 09:01:19 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b55c9e17628516795072285e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache6.l2de3[0,1,200-0,H], ens-cache22.l2de3[3,0], ens-cache20.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 14727654\r\nali-swift-global-savetime: 1762851679\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 13 Nov 2025 17:31:29 GMT\r\nx-swift-cachetime: 31332590\r\nback_uri: /imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793333881435e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"3a29654deae45805d8794954abbb5044","sha1":"42691fc8287fde23d6f03fb34434deabb343df14","sha256":"cc2627b8bf79a940675f68df3fcdb91bf14a94b98c1938dd334c2bfc62538bb3","sha512":"b272db82b275b8f2f0fe414b1f339432bc2663520931f602714e2ede08e8b655f766060cff98dda94f176180b3bcdc53a6e382c4faa10ce67ca13e8008f65353","ssdeep":"6144:Nq0IoTY/D/9IDmn8IDVS+jIDmn0JVr3AW9DuCDP:LTcNl5H03QuDuCDP","tlshash":"3c541216e3668b1f117098c1a1f16d7efaedaa1736f5aef1450c4c42053f9e8a339c62","first_seen":"2025-11-09T02:30:37.967304Z","last_seen":"2026-05-07T01:19:54.906476Z","times_seen":8982,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/000/report_error_video/styles.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /000/report_error_video/styles.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 2307\r\nlast-modified: Sun, 16 Mar 2025 04:12:46 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2307,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c2b40ccda364f88807713e8129d00893","sha1":"2ae21bb81176f74ecbe66b9601b95a960c52baf9","sha256":"fb42142839c81e66c9197a1e374984211ed61acfa8c35099941d2d90a3f9cc74","sha512":"13f89afb453bad6705aa362e902b8a5ad2cd33022d8d9823e6b1d61b5a7973b352291349bf0a53f7ba9b7586740b2da3b80684f05b0669236c79f5cc0e6ba868","ssdeep":"","tlshash":"fe414020d1df9d46b183c1a80bb1da4173ba554bd505fe3c7e8277c04f4a288e0366c3","first_seen":"2025-04-18T23:46:35.101766Z","last_seen":"2026-05-03T01:50:52.766181Z","times_seen":7188,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/000/report_error_video/script.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /000/report_error_video/script.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 1698\r\nlast-modified: Sun, 16 Mar 2025 04:30:01 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1698,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4b9ec7394b9b594781565f4ffc0f7301","sha1":"c5faab0ed52448c2d2af67f89d5c167c32fc9a78","sha256":"aa6ecccaab5ef50d153867b084d7df600be425b8cddea46fa79baba8e61d5247","sha512":"88a2924e5753b36a1eb551101f002b84ffa597617a9987c2c0d7ebc3dcbf832a9b3ed581ed9b5462cdefe3a323c94e2da58074dd2a3542af6bd695febf33b055","ssdeep":"","tlshash":"0a3113bb646f252245ebb15007db7a043531228fa805ed217d3dc7c40fdadb420e66e7","first_seen":"2025-04-18T23:46:35.112204Z","last_seen":"2026-05-03T01:50:52.710553Z","times_seen":7473,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com/storage/assets/img_960f3a1202.gif","fqdn":"fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com","domain":"zhuanshutupian458.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.287Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /storage/assets/img_960f3a1202.gif HTTP/1.1\r\nHost: fdhdfgfghfdgdhfgdghfdgfg.zhuanshutupian458.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":400,"dns":0,"connect":153,"send":0,"wait":0,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/O1CN01O1i63B1rGggDCvKzW_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/O1CN01O1i63B1rGggDCvKzW_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 338637\r\ndate: Sun, 15 Mar 2026 07:52:06 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 9b66334417735611264341121e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache22.l2de4[0,0,200-0,H], ens-cache26.l2de4[0,0], ens-cache6.se2[0,0,200-0,H], ens-cache1.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 4018206\r\nali-swift-global-savetime: 1773561126\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 15 Mar 2026 09:13:52 GMT\r\nx-swift-cachetime: 31531094\r\nback_uri: /imgextra/i3/O1CN01O1i63B1rGggDCvKzW_!!2216598935604-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322398293e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":338637,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"1498d81221d5ebbd0dfb42854b3ccb42","sha1":"2162cdb0e7e2ab35cad60a92ed4555dddbe73ab8","sha256":"9a4c27df946b463cebbd03f5c874dfcb0fc87e47d4356d719162e55711e05da2","sha512":"b1d9b39aad2d782e1e3fc504fa2aae61035c044d46d675b8c7a8043247573804bd94b81cdf3bccabac1419934a1d0246cbf1e677eccc2ecda0d6ae73dd992e84","ssdeep":"6144:ms0z8i4Nrn0MHUIp5n5H8o+YIADZGJHbkcDDCbZpn9h8q63cUeUmvkbOvR:msk8icr0wfBD+YI0WxD+1pnE9sP1Z","tlshash":"8e742306b07609df0e776020921e4aca7eb9b0deefa85a73e4973791847247dd06e713","first_seen":"2026-03-15T07:59:55.734743Z","last_seen":"2026-05-07T01:19:54.918047Z","times_seen":2062,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/tyctyc388-960x120.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /tyctyc388-960x120.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":337,"connect":158,"send":0,"wait":149,"receive":0,"ssl":481},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 44406\r\ndate: Sat, 08 Nov 2025 08:43:18 GMT\r\nlast-modified: Sat, 08 Nov 2025 08:42:44 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.009\r\ntraceid: a3b5feaa17625913980347683e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache2.l2de3[0,0,200-0,H], ens-cache22.l2de3[1,0], ens-cache9.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 14987935\r\nali-swift-global-savetime: 1762591398\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Thu, 13 Nov 2025 00:54:41 GMT\r\nx-swift-cachetime: 31132117\r\nback_uri: /imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793334191477e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":44406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"7fe888844a25455b732401ff74cfd8ab","sha1":"8d19e04de42c10ba020a85c53ce0a89e68228df8","sha256":"f85ce364be6d1d2dd090b2fc02ab3e6dc3013b61a85576e4c0eb4ad8fa408e31","sha512":"a046e5c42fbd73895fe7f7add8d2511b9f5aa297d99ec108c8f47cd4546a16af813bfc54314c865b4c13a74c7be17429c341d1ecc327ee344074221732ba2d2e","ssdeep":"768:/6Qbzz7QUHPIskU5/Eg59QCK5Py43ZKFbVeI0D0gwKjewJ+Tsxfz0JWOyndv7mzv:ykQnskU9lXFK5P3ZKFbV10YRKjdfzOgW","tlshash":"3813013d7682d0410e2e367675f0c638fb9ad9dac96d34dbba795528644403c7c0939b","first_seen":"2025-11-09T02:30:37.980535Z","last_seen":"2026-05-07T01:19:54.891993Z","times_seen":9062,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.ykv2.com/20260127/4lvbVHO7/1000kb/hls/b8cuUtEl.ts","fqdn":"v.ykv2.com","domain":"ykv2.com","tld":"com"},"ip":{"addr":"64.185.235.29","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:14.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v.dbocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 20:10:52 GMT","end":"Mon, 20 Jul 2026 20:10:51 GMT"},"fingerprint":{"sha1":"EA:A0:9B:8E:CA:9E:C6:A8:96:F6:31:49:5D:A4:47:87:14:BE:65:70","sha256":"23:42:D9:79:2F:51:1F:7F:D1:8E:1F:8C:63:96:57:E9:34:2F:9E:1A:8C:AE:65:7C:21:67:C8:19:F8:FD:49:57"}}},"request":{"raw":"GET /20260127/4lvbVHO7/1000kb/hls/b8cuUtEl.ts HTTP/1.1\r\nHost: v.ykv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ciz.ylg4.skin\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 20:02:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 300800\r\nlast-modified: Tue, 27 Jan 2026 14:21:21 GMT\r\ncontent-disposition: attachment; filename=\"b8cuUtEl.ts\"\r\netag: \"6978c9e1-49700\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nexpires: Thu, 07 May 2026 20:02:14 GMT\r\ncache-control: max-age=604800, public, max-age=604800, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300800,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6b2574ea921b1f189b8d950927d6dc2f","sha1":"926b0ae361778c5229bc8ec80ed24ecc8a8b3e58","sha256":"384a3d0a6901a48652c90d474d0ce2dc1fa7173db0a1ea74f8872e19e58758d1","sha512":"f9c4807fb50a7ec5c50faa0943c736fcc3009873cef35aa5b81b8d4464cdfe7b771750add1887376e62a5db44c8dc15c3105fa215e8cec0bec3d0461c5ae5512","ssdeep":"6144:w/vSa7GJl/Pm01QtE+TkahAxzeZdax2GL0ixWPf:w/KN//PprmSzeZ2HTxW3","tlshash":"15541264bb883ccac5160bf5d1554bf255758e126f88478731acbb75b8fd2eec128838","first_seen":"2026-02-18T01:25:29.440475Z","last_seen":"2026-05-01T23:12:47.316384Z","times_seen":23,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/xhtd/960x120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.159","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:15.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /xhtd/960x120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 93540\r\nlast-modified: Thu, 11 Dec 2025 03:48:41 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 27 Apr 2026 02:26:13 GMT\r\netag: \"d17c0265bd5c40f03ea3b38db614d5fa\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: P73Z4ay-7idbuC6kEiFNkHlLlAzhRIyQ3HGpXDMf9g4yVpkUqTAb9Q==\r\nage: 759045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":93540,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d17c0265bd5c40f03ea3b38db614d5fa","sha1":"86fd316dbff0105c353ce4fee261d3ffd67c18ce","sha256":"2861568da5dcad2c4d42b984f1fe980881487c41b41994d0e0783f1b574139ce","sha512":"83f8917b4b01282169bb147584c08e1195907014562a3b78d46a8209e1b817f1c1e2a53a4b566919e19d83dddee3bdbfacd55627dc9fb32b1901c921daa9da93","ssdeep":"1536:J5GRXGxtd59jNNhrDeq3zzI6ipoYDnu9/QvY1Wuqk78ks4xycnTYf2JlavtaDpv8:nGRXGxtd597Rpz0tDnc6q1RY4Ecn0kja","tlshash":"289312b791ecd5c697826c8df5e304a056069606af7cfdd71584168690feeed2ac7300","first_seen":"2025-12-12T01:02:04.573696Z","last_seen":"2026-05-07T01:19:54.902412Z","times_seen":7497,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":37,"dns":203,"connect":14,"send":0,"wait":2,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/xm/5088/120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 04:12:27 GMT","end":"Tue, 21 Jul 2026 04:12:26 GMT"},"fingerprint":{"sha1":"6C:59:29:80:59:A5:04:54:9B:41:05:27:1B:7A:C6:1D:B7:8C:96:E5","sha256":"49:C0:8A:F5:70:BC:7E:7C:D3:6E:83:C5:F4:02:B0:5B:32:BB:F6:EA:DD:6C:46:3C:B4:5B:4D:19:10:58:7F:66"}}},"request":{"raw":"GET /8888/xm/5088/120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 443228\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 16 Sep 2024 13:02:03 GMT\r\netag: \"66e82c4b-6c35c\"\r\nexpires: Sun, 24 May 2026 13:16:55 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443228,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"6dfeb48901b7cd79256ac55ca0e057ad","sha1":"7f5be548b85f2c58a5a75f89831a60372e1fd49e","sha256":"077c10e1c5dda6d69f6cdb1cd61bd9b88d46ab20a09a0d1cd575348b422a80f6","sha512":"eb336246e254747a2ba6cc9ce2a793aa4919f2dce04f7327f82f33fbf1b7177a0a828bb4fdb687af252189476332345f9ca15e7a1163b0c572194b8b27464c45","ssdeep":"12288:bITYwMITYwMITwzFWFbSimWFbSimWFFL851b251b251b251ba:sYwTYwTakQcQc/87272727a","tlshash":"bb9412d3e4ea2823c6a62244ca9df7d57f411156653ea3d79b6b3f100e52d22e0ced09","first_seen":"2025-11-21T00:36:15.409425Z","last_seen":"2026-05-07T01:19:54.908434Z","times_seen":9181,"resource_available":false,"data":null}},"time_used":3137,"timings":{"blocked":652,"dns":96,"connect":270,"send":0,"wait":1012,"receive":823,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/ky61-960x120.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /ky61-960x120.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\nserver: NgxFence\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i2/2207246784654/O1CN010a6y4d1kFaOOgMqmk_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44406,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":335,"connect":152,"send":0,"wait":149,"receive":0,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xm2026.myxuanxuan.com/8888/pg507/pg120.gif","fqdn":"xm2026.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xm2026.myxuanxuan.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 05:32:24 GMT","end":"Thu, 18 Jun 2026 05:32:23 GMT"},"fingerprint":{"sha1":"C9:80:5C:10:10:71:28:9C:32:A4:D9:45:EA:59:20:E7:31:A6:C8:41","sha256":"6F:9D:8C:C6:00:E1:76:75:24:64:21:39:FB:B5:85:BE:35:1B:FA:B8:1B:57:9E:EB:3C:6F:9F:88:AE:DF:A6:D2"}}},"request":{"raw":"GET /8888/pg507/pg120.gif HTTP/1.1\r\nHost: xm2026.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: image/gif\r\ncontent-length: 732135\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 05 May 2025 10:11:05 GMT\r\netag: \"68188eb9-b2be7\"\r\nexpires: Thu, 28 May 2026 08:33:52 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732135,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"d812f0151d7042065067e76fe039facc","sha1":"a48f9c692fa3916903db45819d4050f52d747a33","sha256":"849c1d8c67e9a3151b4a14d3b70e23e4abc3649dcac2e397587afedc70dcf25e","sha512":"a082dff74f4a12e121b6f185ba58d228399af7fa6f50df9d8a891c42d01724d7381842985926980c2e35d1f4b352ff7b425000682f6bdbb0038153d9893ff43f","ssdeep":"12288:RzuTwzuTwzuTwzuTFs9yJuVwrVwrVwrVwrV5eGrQSoSoSoSKDu4OVDu4OVDu4OVQ:RuTeuTeuTeuTFw1WrWrWrWrjeGkSoSoV","tlshash":"43f42339d14794a6938b0a7b9f1411a46305de26a7f220398327f987bc46793ffdb80d","first_seen":"2025-11-21T00:36:15.392801Z","last_seen":"2026-05-07T01:19:54.890398Z","times_seen":9019,"resource_available":false,"data":null}},"time_used":2663,"timings":{"blocked":-1,"dns":292,"connect":267,"send":0,"wait":528,"receive":1239,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"11224.xn--gps-8y0gm25n.xn--55qx5d/d/11224?_t=1765444375","fqdn":"11224.xn--gps-8y0gm25n.xn--55qx5d","domain":"11224.xn--gps-8y0gm25n.xn--55qx5d","tld":""},"ip":{"addr":"36.158.231.176","port":443,"asn":56047,"as":"China Mobile communications corporation","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.xn--gps-8y0gm25n.xn--55qx5d","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 17:10:52 GMT","end":"Sun, 05 Jul 2026 17:10:51 GMT"},"fingerprint":{"sha1":"14:35:E7:15:D0:69:74:17:04:77:88:A9:C4:73:D4:9B:E4:64:D6:AD","sha256":"7A:77:B5:29:20:D8:74:37:C7:83:CD:B4:18:86:73:6E:7F:26:29:90:C4:5F:B4:64:3D:DB:EC:53:3F:AA:9F:D8"}}},"request":{"raw":"GET /d/11224?_t=1765444375 HTTP/1.1\r\nHost: 11224.xn--gps-8y0gm25n.xn--55qx5d\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 30 Apr 2026 20:02:14 GMT\r\ncontent-type: text/html\r\ncontent-length: 145\r\nlocation: https://fsffbhd.brffff.com/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375\r\ncache-control: public, max-age=900\r\nexpires: Thursday, 30-Apr-2026 20:02:14 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-via-jsl: 68ec4ad,-\r\nset-cookie: __jsluid_s=5277629451a41a2241120c81af44c5f2; max-age=31536000; path=/; HttpOnly; SameSite=None; secure\r\nx-cache: miss\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":2156,"timings":{"blocked":-1,"dns":369,"connect":280,"send":0,"wait":350,"receive":0,"ssl":1156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 313208\r\ndate: Mon, 16 Mar 2026 07:08:12 GMT\r\nlast-modified: Mon, 16 Mar 2026 07:07:37 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.031\r\ntraceid: a3b5fd9a17736448927484741e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,0,200-0,H], ens-cache6.l2de4[2,0], ens-cache5.se2[0,0,200-0,H], ens-cache1.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 3934440\r\nali-swift-global-savetime: 1773644892\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 16 Mar 2026 13:49:33 GMT\r\nx-swift-cachetime: 31511919\r\nback_uri: /imgextra/i2/O1CN01fYtu421rGgg7EelJL_!!2216598935604-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793323698423e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":313208,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4dd416bdc56857e06ac396a2b6f622a9","sha1":"13cb2796a282b37edb4545bdf09164564744e68b","sha256":"4625b7155712d6ee46075dfb828d3ad5cc74d048150222f37e7fb087c5e521a8","sha512":"3f5104eaa0cf849f30394d70d8afa2c166e5231e5675bb9f24e0b36dd041e8fad095cfec4050cbdbfe7ee787e667456b827056d49569baaeeb47c440c058761e","ssdeep":"6144:+TtATmMjeCfAQAxlDk9uNVvzoEaedXFm1KCVK6Ybjt59nb3Aead:+TjLCfAQAxFkYNVHaedV+K6GjtDb3Aeo","tlshash":"f864233ec5b40cb479768cf2509b7cef014a5f52be2211166f968a5f2d1c2bd021da9f","first_seen":"2026-03-16T07:13:28.41319Z","last_seen":"2026-05-07T01:19:54.908974Z","times_seen":1764,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif","fqdn":"img.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif HTTP/1.1\r\nHost: img.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 406836\r\nserver: openresty\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,OPTIONS,HEAD\r\naccess-control-allow-private-network: true\r\ncache-control: max-age=5184000\r\nm-traceid: stnbw2foodf7203m9zij\r\nlast-modified: Fri, 05 Dec 2025 07:15:26 +0000\r\ntiming-allow-origin: *\r\nx-via: 1.1 PS-HKG-04JZz35:6 (Cdn Cache Server V2.0), 0.0 PSrdsdgemSTO1sw92:5 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nage: 1\r\nx-cache: HIT from cache.51cdn.com\r\nx-ws-request-id: 69f3b545_PSrdsdgemSTO1sw92_37162-25021\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34578e43aadd0f0be311cfc623f3391e","sha1":"895f4361fbcd073db0535c831ba4424822b131a9","sha256":"b762e8d34521fe2e17fbbf032cc05edb46f8b217bbcf7bf030c6b98a50d66760","sha512":"a9cfe1c1e668f7de244195d0b606c8adeaad8f2a940629a72c1d552b6c238797219dc0e05fa423bec6fb3580686e402e4f352b2f1983b04e48b03642dc445cdd","ssdeep":"12288:v1HhfMhcKYspUXuT184HQIOO+EP/WvWG7/:dBfI/dwIIEWvWG7/","tlshash":"448423aadb664e34d5904c2fc1fb890fc4c476e9e3f716e69b36a9098bf7253448e040","first_seen":"2025-11-06T09:50:46.694344Z","last_seen":"2026-05-07T01:19:54.913432Z","times_seen":8019,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":93,"dns":69,"connect":8,"send":0,"wait":9,"receive":32,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 643569\r\ndate: Sun, 25 Jan 2026 16:50:09 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: 2ff6309f17693598091573899e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache39.l2de4[0,1,200-0,H], ens-cache28.l2de4[2,0], ens-cache11.se2[0,0,200-0,H], ens-cache1.se2[3,0]\r\naccess-control-allow-origin: *\r\nage: 8219524\r\nali-swift-global-savetime: 1769359809\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 25 Jan 2026 17:07:51 GMT\r\nx-swift-cachetime: 31534938\r\nback_uri: /imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif_.webp\r\nvary: Accept\r\ns-rt: 3\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793338941988e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"f5919b3ac13cce9d56f7966003e826d8","sha1":"75c040dace5ddc741ddcbda8e0bc74fcbff417bc","sha256":"739605b51e61972ae4e03385a848c5cc0561d639eadb33e424567f7f3b9d8f88","sha512":"5864eaf234c1b5816f6faeb6ef6f499154110340a9c412a742b35f4304a7cdba4cb88efbe61887c10593e96737a895d6cd466cd8fe990edce43338535123cd17","ssdeep":"12288:E2PPPsqKfJQrQrQrQFUpPnn9uVK49uVK49uVK49uVKZRV7YC:E2PPPJQc9KK49KK49KK49KKZX7H","tlshash":"c2d41338875b6ab15d82fe6c4ce1a0d980f951df53b74669e7c09c30936a31fb382b64","first_seen":"2024-10-04T10:32:36.972611Z","last_seen":"2026-05-07T01:19:54.871999Z","times_seen":9180,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/font-awesome.min.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/css/font-awesome.min.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 21920\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21920,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21758)","md5":"848131f2ff7d4da29f4db583540995ad","sha1":"eafa07d5b86b793e713f24f5c294edea8264d153","sha256":"ed9f76f18157127c1b53c22b5fb151724b715156e448f1d454fd3ead00ab8776","sha512":"d2ab31f5f1f8f852193765d17236ebe3379537026a4ca5e9ef56800d10e71b8bb10a397841e894990528c8e304e8b5730a6b2ea6e39f2165e9e050ff324b64af","ssdeep":"192:sqLn/8W+ab2edrKeTUKIErArKlcZJVrJ3ee+cR6waWm215bvfwf5DrkHUa2:vk5yWeTUK1+KlkJ5de2UWmyTfwYUa2","tlshash":"60a241f8e54c01d66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2025-10-01T16:58:36.105634Z","last_seen":"2026-05-01T22:42:17.466792Z","times_seen":103,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_ui_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /abc/fixed_ui_df6ff8.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\ncontent-length: 5587\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cHs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5587,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ddc9dab2d6296883994d17cfe04822db","sha1":"661349a8c44f256e9d9dc70b72b6f1fdca1fefd2","sha256":"3d32da3eba33d2b7633d30bcd27b09e557d3db09eda4b6774573b32112c9698f","sha512":"25b861d9de9b0755e6d2bc633595fe63c55fd5b4bc5c6262f9b220ad72f92ba37fbff2cf670aedd6601d8f25314e7c1cc824788f5a558409c724c02a394888c3","ssdeep":"96:QsrFraOuiXEMwEJxg2zCAE1fEWTzg2fCu1JkiTpoP5VYb5G6JS/lWrNOKsKQMX:jB15wim2zCAkf5T8CCu1J45VGGg+gYls","tlshash":"22b1955f79e33096992330b49fff140836369013620edc947c4e91646faab982672fe9","first_seen":"2026-04-30T20:02:43.302874Z","last_seen":"2026-04-30T20:02:43.302874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/bt960120a.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /bt960120a.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: NgxFence\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i4/2207246784654/O1CN014PyHeq1kFaOP6Xhwn_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292628,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":333,"connect":149,"send":0,"wait":149,"receive":0,"ssl":489},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/main.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/css/main.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 75719\r\nlast-modified: Sun, 20 Nov 2022 11:44:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75719,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (317), with CRLF line terminators","md5":"752f2b311643d4c27f445491cd470e80","sha1":"eb6311b259f732c4bec3328be62a2d86f09fe649","sha256":"5ab274d62c8d0a8f09667c572f5a035876f8c839b0b0bec60e839949a55fe6cd","sha512":"5dcfe62327d8bebf113176fb315b9e37ab551df2d828c3a2e18df87432da36eddb3941604c9f44c3ab42f49e724d5648f1153f8a9a15eb14e5eeeb2bca8ab82f","ssdeep":"768:B3YyTwq3lQltHLyXmJc4gm1pX+Ba8J7FUCMlCPNJ5QrEizU3RjUuW7lKDHMTex7D:ZCHLynkyUsD/niAMLXYbiA","tlshash":"d973a729e7412009b217e299fbf19b977f4a4092da0747f8b5e47114c3ca79a2a733cd","first_seen":"2025-10-01T16:58:36.060285Z","last_seen":"2026-05-01T22:42:17.475014Z","times_seen":100,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl//js/main.js?ver=1.3","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl//js/main.js?ver=1.3 HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 15418\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"50efb615d5b98665a476133c17d44dc0","sha1":"3ba6f849051fe6b5f198bf32f25b3dfb520f6228","sha256":"92b817a0c1f7faa9b751ccf22fcd862a6bfe9823377c9add03bd1179b7f8edb8","sha512":"0fc7b41a4278221745b955b40d8811f13ef0aacadf0ef1e167e7e8f5bce1387e53ea5710976d3c99b7754350702b5ab036c54a6579d62d3c0bb618b08e6657a9","ssdeep":"192:EPYk40ELVRwnl6xnyl9nylRsC65QEMEDlAlkx8HCJdPg3YH2dIfuXZHN0MacfB9B:EglHVeEhQWedo3YHmt0Mao1l9f0DuF","tlshash":"3862b5483847644746773225ac3b0a0cff75550b86135614befc19a82fb0b96f2aafbd","first_seen":"2025-10-01T16:58:36.110852Z","last_seen":"2026-05-01T22:42:17.46847Z","times_seen":103,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mdynieu.com/images/69146317ec12e29e413cb55f.gif","fqdn":"www.mdynieu.com","domain":"mdynieu.com","tld":"com"},"ip":{"addr":"161.129.35.190","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdynieu.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sun, 08 Mar 2026 00:00:00 GMT","end":"Sat, 06 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:63:55:C1:71:21:73:A8:82:6B:B9:0F:52:C8:F8:50:C1:B3:84:C1","sha256":"BC:5E:FC:CA:C3:F8:96:5E:BB:35:AD:57:17:71:B6:AA:83:64:66:51:C7:21:E1:D6:4C:C0:F0:6B:25:65:4D:BB"}}},"request":{"raw":"GET /images/69146317ec12e29e413cb55f.gif HTTP/1.1\r\nHost: www.mdynieu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-length: 0\r\nreferrer-policy: no-referrer\r\ncache-control: max-age=600\r\nlocation: https://img.meituan.net/portalweb/27a1e3a72fece63c3ff55f2c96c993a5588276.gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":406836,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":2307,"timings":{"blocked":1049,"dns":435,"connect":203,"send":0,"wait":203,"receive":0,"ssl":414},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 300651\r\ndate: Tue, 10 Mar 2026 03:59:47 GMT\r\nlast-modified: Fri, 06 Feb 2026 13:22:37 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.034\r\ntraceid: 54ffa01c17731151875445394e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache9.l2de4[0,8,200-0,H], ens-cache13.l2de4[10,0], ens-cache9.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 4464145\r\nali-swift-global-savetime: 1773115187\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:30 GMT\r\nx-swift-cachetime: 29197697\r\nback_uri: /imgextra/i3/4183327079/O1CN01Jh4YeU22AEs6UM5mZ_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322338283e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":300651,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"8a47d4e0340db7d8001c1c2c39716b93","sha1":"0fc8202a98d51793df1755c0bdb9ed54294a8519","sha256":"4a6044bb59cb58f446ba34163ea45c5079c9c1a556c3f2bc626440f638efaf30","sha512":"7277d622b154e4756836791b83a92294ece23d66f15b7450937a0525679433e4f90622b04e6a37bc2db1aa067060c3e07fa066fbfe0660ba3c926b54ff52cb2f","ssdeep":"6144:v1p2LgPnLX3nnLXnXw3esj1ls34FfhavVHf7lYJkxmWYQAYg:v1pXXbXXw3eGXH5M7yixDY6g","tlshash":"9f5423c4f7e76f3eaf9218f3296f34883669c81d91f4813a1e86b1eb16231591434d3a","first_seen":"2026-02-07T11:16:48.410559Z","last_seen":"2026-05-02T15:20:24.587591Z","times_seen":3366,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1212.syhze.com/8888/mbh/960x120.gif","fqdn":"img1212.syhze.com","domain":"syhze.com","tld":"com"},"ip":{"addr":"45.8.115.46","port":443,"asn":4785,"as":"xTom","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1212.syhze.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 04:12:27 GMT","end":"Tue, 21 Jul 2026 04:12:26 GMT"},"fingerprint":{"sha1":"6C:59:29:80:59:A5:04:54:9B:41:05:27:1B:7A:C6:1D:B7:8C:96:E5","sha256":"49:C0:8A:F5:70:BC:7E:7C:D3:6E:83:C5:F4:02:B0:5B:32:BB:F6:EA:DD:6C:46:3C:B4:5B:4D:19:10:58:7F:66"}}},"request":{"raw":"GET /8888/mbh/960x120.gif HTTP/1.1\r\nHost: img1212.syhze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 496600\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 30 Jan 2026 13:22:20 GMT\r\netag: \"697cb08c-793d8\"\r\nexpires: Sun, 24 May 2026 13:16:55 GMT\r\ncache-control: max-age=2592000\r\nserver: nginx\r\nx-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496600,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"98f1aab916043713d1744086a4aac70d","sha1":"abbc50f57afaea6090ffec73c53bc824926db831","sha256":"4bcfe3c6ff3dcd160bd51a92164046ed60b025895dc6affc06db0d6d88b77259","sha512":"50aded0afad0a2f06bc9b5dd4ba767e64e5cf59b627ee62ce66bf3a769b0fddfa7533cb591e0ad6dfd3be42afa77d37181ea9fd7dac487946081ee0f24e837f0","ssdeep":"6144:9G4QxSTTMRTTMRTTMRfE3O4+g2CjZnFaYG/eFVVL:E0T4RT4RT4RyO4fFZFaL/Q","tlshash":"c3b423ec487fcd5dc8b22c2c3143023349a2b17879df88626793b9d7e5d6b196a82d35","first_seen":"2026-01-31T02:19:27.411392Z","last_seen":"2026-05-07T01:19:54.912415Z","times_seen":3968,"resource_available":false,"data":null}},"time_used":3031,"timings":{"blocked":523,"dns":59,"connect":270,"send":0,"wait":548,"receive":1352,"ssl":276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.ykv2.com/20231126/FnCyBsOK/1000kb/hls/index.m3u8","fqdn":"v.ykv2.com","domain":"ykv2.com","tld":"com"},"ip":{"addr":"64.185.235.29","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v.dbocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 20:10:52 GMT","end":"Mon, 20 Jul 2026 20:10:51 GMT"},"fingerprint":{"sha1":"EA:A0:9B:8E:CA:9E:C6:A8:96:F6:31:49:5D:A4:47:87:14:BE:65:70","sha256":"23:42:D9:79:2F:51:1F:7F:D1:8E:1F:8C:63:96:57:E9:34:2F:9E:1A:8C:AE:65:7C:21:67:C8:19:F8:FD:49:57"}}},"request":{"raw":"GET /20231126/FnCyBsOK/1000kb/hls/index.m3u8 HTTP/1.1\r\nHost: v.ykv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ciz.ylg4.skin\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: application/vnd.apple.mpegURL\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nexpires: Thu, 07 May 2026 20:02:13 GMT\r\ncache-control: max-age=604800, public, max-age=604800, immutable\r\nx-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":373921,"size_decoded":0,"mime_type":"application/vnd.apple.mpegurl","magic":"M3U playlist, ASCII text","md5":"c7eef054e626edba5561035172512219","sha1":"25dc01121c6853092ebdce4258fd27731d53ec55","sha256":"fcda45ed1d203051d5d5a74d843c857b1f43130edbbe9954d433c849866db7b0","sha512":"d41bc25c795fc67736e05c90ffc04b58cce561db60975143c09e4a9ab701a7f5192cf02d01379dbe29b17cf47e14b6d23effc9aaf53093efe7542ff9dfd2479a","ssdeep":"1536:wSVZbA2uJDan8t+wO18gPhlkA+jlDptXyfCfRl+8jaWn2V6fwyG3qllRyYiTO+NS:wSVorBO18gpKPt2gmd6zlRyi+dy","tlshash":"ba840e266bd5f0270d2d0f19dccb68d57de0bd1acd80a3c834e5c6f3ad2972b9294a16","first_seen":"2026-04-30T20:02:43.322172Z","last_seen":"2026-04-30T20:02:43.322172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dq38rjje7qjm3.cloudfront.net/pg/960X120.gif","fqdn":"dq38rjje7qjm3.cloudfront.net","domain":"dq38rjje7qjm3.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.159","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:15.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /pg/960X120.gif HTTP/1.1\r\nHost: dq38rjje7qjm3.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 426387\r\nlast-modified: Wed, 14 May 2025 14:11:08 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 18 Apr 2026 00:36:07 GMT\r\netag: \"4b9d08738f9302690a7b927c2f3207e1\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: t-RW8IwtbxlHB87Shxl7BYKAHmoBt-LITHn7ET_01PGc_-GmbA3boA==\r\nage: 1106769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":426387,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"4b9d08738f9302690a7b927c2f3207e1","sha1":"3e313c7e90925b94f946b0ea742cde98b85a12a9","sha256":"e904079f102da7afc351280a6237ca68cb1aa54f9c536ee4e707e82fdb8c8bab","sha512":"ec1af7a43016c96251aa57e6a3b8ca489fc424205548f909bb099f8610f3692c8e0eb2168488e292f56be6c7c1db688c584f63acba3c03dc87e3ebafbffec277","ssdeep":"6144:CaKtaKtavuZSA0A0f4v98WAnzPlPrvhYCSCEC+/KCEC+/KCV:CaKtaKtavZA0A0f4v9gzQC+/KC+/KCV","tlshash":"6394223b093d630460ec83a189e0ba0f5c217919ade1c4376b7dad1d54f587a7dea8b3","first_seen":"2024-06-23T17:36:04Z","last_seen":"2026-05-07T01:19:54.900033Z","times_seen":2074,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":41,"dns":197,"connect":14,"send":0,"wait":3,"receive":12,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_ui_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /abc/fixed_ui_df6ff8.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5587,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ddc9dab2d6296883994d17cfe04822db","sha1":"661349a8c44f256e9d9dc70b72b6f1fdca1fefd2","sha256":"3d32da3eba33d2b7633d30bcd27b09e557d3db09eda4b6774573b32112c9698f","sha512":"25b861d9de9b0755e6d2bc633595fe63c55fd5b4bc5c6262f9b220ad72f92ba37fbff2cf670aedd6601d8f25314e7c1cc824788f5a558409c724c02a394888c3","ssdeep":"96:QsrFraOuiXEMwEJxg2zCAE1fEWTzg2fCu1JkiTpoP5VYb5G6JS/lWrNOKsKQMX:jB15wim2zCAkf5T8CCu1J45VGGg+gYls","tlshash":"22b1955f79e33096992330b49fff140836369013620edc947c4e91646faab982672fe9","first_seen":"2026-04-30T20:02:43.302874Z","last_seen":"2026-04-30T20:02:43.302874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/js/loader.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/js/loader.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 15662\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15662,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (539), with CRLF line terminators","md5":"d909f97c03993ae2e5fdd1a20036ee1d","sha1":"8c77f5b0b6d8c5fa6631c1d24bd590f251251783","sha256":"8632e3c03f573e5272e6ce1c884f0c5ebe622e079e93070f2cf1d9acaf7b671f","sha512":"409720f9ca929fdf674263e3a835fbc9d33e9e14313aa52ecb9a6af0b30aff6304f99b77d7d5e196ac547c1e8f3baca9739f7eb16bd19bfdc9e611fa330643bd","ssdeep":"384:dS7huoF7fq3wiyuYWiqv0TPkzsnRQcVtDAqoQjh3lU:6koF7fq3/yuY7P0snzVtDAqoQjh3S","tlshash":"8a62c4ea3ac2b803e67475e050bf004a127bdca77448c4a5f24cd8e55eb8558a6b7f3c","first_seen":"2025-10-01T16:58:36.056014Z","last_seen":"2026-05-01T22:42:17.491287Z","times_seen":105,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/images/tail_bg.gif","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/images/tail_bg.gif HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/gif\r\ncontent-length: 386\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":386,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 338 x 13","md5":"716c43a6d964122405a39f9254576f62","sha1":"5b772e0e8a25b67c7fee1797f3ddaa5690e4b42f","sha256":"1f30ea29ddd41c965e395d47a3db088ddc63883a7ca41c50d88e10a6eecd3390","sha512":"0c262b7983beef722d14e9d237702544bf52814f8bae0af51dcbd3c7f2133a2aa7ab7798151f025d80fa0bc1be7f3526bbbadb716defac20a7cb8ed2917eb09c","ssdeep":"","tlshash":"87e0f19458920446fe091228ea705bcd73598b51eec08936a509215c79873e61e8553c","first_seen":"2025-08-12T07:54:21.285949Z","last_seen":"2026-05-01T22:42:17.480145Z","times_seen":75,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/layui/css/modules/laydate/default/laydate.css?v=5.0.9","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/layui/css/modules/laydate/default/laydate.css?v=5.0.9 HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 7538\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7480), with CRLF line terminators","md5":"7c3e4d43183a9349dfa96442659acfd5","sha1":"da166a7695cb2952259dfe722aff647bc71c2fe5","sha256":"816fa539d9a9b6605f1abe933b992125fe6ea6171f530dd0b1c18590d898bda5","sha512":"032776c48bb2283c85b011379e6cab3190561c48919775c5c394496349baa55c7286a50972d21d200ee24b2849d64ca3f6b4c850c0cfe400bde234b1fe4c18c8","ssdeep":"96:xOyYW44i4ijYTq472w7hlVYQ4K/Lk5bYsBE2rBOB:xO92fy0qK2wFYD9brBE2rBA","tlshash":"bef1cb7161902cd4702fc326b4ac7cbaaef8dc02dae3165ce5b8621785c25b7a57d34b","first_seen":"2023-07-23T12:53:57Z","last_seen":"2026-05-02T22:59:43.516952Z","times_seen":2738,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 492431\r\ndate: Fri, 17 Apr 2026 10:54:10 GMT\r\nlast-modified: Fri, 17 Apr 2026 10:06:23 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.011\r\ntraceid: 2ff6079517764232499468062e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache27.l2de4[0,0,200-0,H], ens-cache23.l2de4[1,0], ens-cache2.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 1156082\r\nali-swift-global-savetime: 1776423250\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 17 Apr 2026 13:22:55 GMT\r\nx-swift-cachetime: 31527075\r\nback_uri: /imgextra/i3/4183327079/O1CN01MkfRic22AEsuzub0T_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322658329e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":492431,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1300 x 160","md5":"8610e8c01246e4fab4f299e0b054cc20","sha1":"d551f143167fdf97de87de2c3e9a104a609aee8f","sha256":"9b88c62d1f6ced8c683d1964e6cf62c027723636fac5c8342ee1612862205fb1","sha512":"113708932750d4747d616df035c50b2a0d1ec55b96f4a063cdce50a6368c3eb8a4f2dc2c69eb432c19d0dc64902ae23b15c0ee1832fd4b0f9b20cbb819fd6184","ssdeep":"12288:isJNH7va0AIyDz9+w5bWQUiHsXEyfIFjIFU:jJJ7vTAIyDhhgQ3sX/I","tlshash":"c0a4234d7071ee973a170f38910d2d6cc83e967bac98d91e1de4b44622e0276b4ec99f","first_seen":"2026-04-18T01:31:07.041199Z","last_seen":"2026-05-07T01:19:54.888326Z","times_seen":819,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/images/fontawesome-webfont.woff","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/images/fontawesome-webfont.woff HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: font/woff\r\ncontent-length: 0\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 451961\r\ndate: Fri, 17 Apr 2026 07:18:14 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5019d17764102940762867e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache33.l2de4[0,0,200-0,H], ens-cache28.l2de4[1,0], ens-cache17.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 1169038\r\nali-swift-global-savetime: 1776410294\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 17 Apr 2026 09:19:41 GMT\r\nx-swift-cachetime: 31528713\r\nback_uri: /imgextra/i3/4183327079/O1CN019gjCop22AEssNoJAh_!!4183327079.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322548313e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":451961,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"831710bb840bed9ced5779c1a2c1681b","sha1":"3bd57c0f6f81a5240a39fffd331643c28d90e12c","sha256":"5aa3c5140e47cb1f67c8ed9e6076d6087e5cac802a9210de37ae239e85873e06","sha512":"b1edb9b61e319e379a7486c24ee6f42415db973f0c3a842ab377852c9b7f5a2a42264d286382bd1b83ea7cdd64f98a4e12921444ac3b59ee840841b9a713fc5e","ssdeep":"12288:q/0Vf//0Vf//0Vf7R22fR22fRsV3mczrum57g7g7a:q/0VH/0VH/0VzRdfRdfR1Oxssa","tlshash":"fda42376a0220b9c1927159de66c2bf315f66888478325cf0e7ae92fe54b350173ef93","first_seen":"2026-04-19T12:12:58.193819Z","last_seen":"2026-05-07T14:09:07.410335Z","times_seen":782,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":48,"dns":1,"connect":21,"send":0,"wait":57,"receive":13,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.brffff.com/ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375","fqdn":"fsffbhd.brffff.com","domain":"brffff.com","tld":"com"},"ip":{"addr":"172.67.71.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:14.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brffff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 19:12:23 GMT","end":"Wed, 17 Jun 2026 20:10:57 GMT"},"fingerprint":{"sha1":"58:F3:6C:D6:53:06:24:55:BA:3E:5B:04:62:48:06:6F:B1:75:94:70","sha256":"F0:5D:1B:60:07:9D:34:05:71:DA:8E:2E:A0:0A:88:B3:C9:73:D8:E0:48:6E:6E:42:72:7E:D3:97:36:1F:D2:07"}}},"request":{"raw":"GET /ea980b9daf2cbb13355e4431bbc43384.gif?_t=1765444375 HTTP/1.1\r\nHost: fsffbhd.brffff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 30 Apr 2026 20:02:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 568104\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3sgtQqDf2oFnPHYISdHaVS76ji1rcqKg%2ByCCYKlZYz4fB8p0J2yb0xMr3QlSMPb9Gi2lnoBDRL7T6KyLFM1jJjIaFb2sTXK6jiDmQmoP6hAvwRoegXf1SztaqZG68J6n0KUiA%3D%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 11:26:10 GMT\r\netag: \"693bfbd2-abcad\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-polished: ok, orig_size=703661\r\ncf-bgj: imgq:100,h2pri\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 5755\r\ncache-control: max-age=31536000\r\ncf-ray: 9f49249859f00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1925ddbac61bd86167e56762d9865272","sha1":"3af84806b787154f360260c48cd5dcb428c26f88","sha256":"d85767c20babde062fe404802a0e76670418dcbc3d1dbae7e07c9809deb1c5aa","sha512":"1d3f0b1ff9e05269e1842604c29e236cd598cb2af33daa07916cfad00591377d58ac51a385ca7d688e98fdd38f7b61eeb9fc7eb58ce6013a2764182198954399","ssdeep":"12288:U70AA6kUL5fzQs1R6fQQpOFpO0qidVKdSLIJ6UXErHh0Ob9Mu:RAA6kUFMs1nQiFqGVIJxXEV0ObWu","tlshash":"d3c42312f3d1f034f1f4b22986aa0786ad58999f1d4466412bb0f8edb2da1d5d1b0cdb","first_seen":"2026-02-10T10:56:09.274713Z","last_seen":"2026-05-07T01:19:54.910276Z","times_seen":2259,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.ah7907.com/846-960x60.gif","fqdn":"img1.ah7907.com","domain":"ah7907.com","tld":"com"},"ip":{"addr":"98.98.86.10","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img1.ah7907.com","organization":""},"issuer":{"commonName":"Certum DV TLS G2 R39 CA","organization":"Asseco Data Systems S.A."},"validity":{"start":"Thu, 06 Nov 2025 07:27:15 GMT","end":"Sun, 06 Dec 2026 07:27:14 GMT"},"fingerprint":{"sha1":"EE:18:15:48:CE:4E:22:9F:18:59:AB:6E:5E:C0:0D:4E:AF:C2:86:22","sha256":"65:F5:69:07:04:80:B4:E3:E7:D0:C5:50:2E:02:11:1C:02:89:6E:83:40:00:DD:00:37:08:E9:9C:1C:A3:4D:59"}}},"request":{"raw":"GET /846-960x60.gif HTTP/1.1\r\nHost: img1.ah7907.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: NgxFence\r\ndate: Thu, 30 Apr 2026 20:02:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":228,"connect":152,"send":0,"wait":157,"receive":0,"ssl":496},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/ldc-lite.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/css/ldc-lite.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 1160\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9bfc9715d432b5772125b2a549a059b7","sha1":"7cbf99fb4f00c7e43c070dea0e8431f7f751649d","sha256":"f2ccaaed69700a56e51a0af7eeb7e355ea6c00b6161292e039ab49e812c76609","sha512":"3886977bd4372d2be4d055c6ed2b0f72e6257911f7513618228f826adfe9783e09ca6057e117750608a8343cb7b92894c3132c27d84875255472d81b0a93c986","ssdeep":"","tlshash":"8e21f4feee35000cba22e1693c909bd517a54056d85bc92dbaf1342d9e4858d1d1138b","first_seen":"2025-10-01T16:58:36.139427Z","last_seen":"2026-05-01T22:42:17.498061Z","times_seen":64,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":737,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/player/dplayer/hls.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/hls.min.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 241648\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241648,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"6cfa29933ba9ba506ea73e084de951b9","sha1":"30004f2da2e1e06f671eb2bfda00f8bcbe69b47b","sha256":"0d925ef64b764ee2d8e362ebec98668e5fd09887ec0fb70bd82d121097c40d7c","sha512":"5e7b2ea8fd8b8edca2554f5423cde03bcc8934fb03904259baba2bb9e51ae98af837877ea0223016c71660bbb418543667ecfdfc1b4831d513d57a4ff886915e","ssdeep":"3072:pI5L1S8HY5x1kVQ5ToDOzBPCB2baeBSZ3yg:pI5xSCY31O2oDO15tS","tlshash":"53341c9db661706543c3a1a5803f061a7236b92e7409c1fcfa6bd5f61cb885e603bf78","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-05-08T11:01:48.458902Z","times_seen":14846,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/js/bootstrap.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/js/bootstrap.min.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 32658\r\nlast-modified: Sun, 20 Nov 2022 11:19:06 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31650)","md5":"332744d248c35d69307095bc90bfc8d5","sha1":"1955d2b74ce4918aeaf12db7193f823e3b6a06f6","sha256":"1f37ccd582c84cde6d297ef6a0b88d784a6b3c68865152777c794da3aac579e0","sha512":"300088d846f6f31e0ed3b5b2d606c46e2e1fb364a56dd83ce471ffff857b359fb244bac3f057320394dc274a3e10d421ccd9fb0bd9d70ed67e4fee35870eb3f8","ssdeep":"768:xoBFw1wl+WRydWDRQgn8WI0fBQLrX84XCqzmHC5:SAr2MRCqz","tlshash":"74e29446b23031a107dfb1e5515f020f723a6a6dea06907c38b999e53eb9c48717bf39","first_seen":"2025-10-01T16:58:36.116276Z","last_seen":"2026-05-01T22:42:17.500396Z","times_seen":105,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":912,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/layui/css/modules/layer/default/layer.css?v=3.1.1","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/layui/css/modules/layer/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 14426\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14426,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14368), with CRLF line terminators","md5":"87bf8a200dca15a474ab65176ca52f88","sha1":"5cee6d494a3622ef02a9cc599b6ac60a73d53ace","sha256":"de165e1667e0bb7697ad2e79515447149a8486bcfc5223a479ed935dbaafc99b","sha512":"51a70d7031f2f741b2834c394b98f9f946ceb071900753916b11e514a876ee539a6282ee07bff3e8ecc1c21479917af1a18211d074a968d123f29011efbf0dd3","ssdeep":"96:wp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:zWmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"465231e144811299b0278721d6dc7eba32f88d43e5630daef2573c1f874c6dba2b6247","first_seen":"2023-06-10T12:18:04Z","last_seen":"2026-05-02T22:59:43.589103Z","times_seen":3170,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/data_3d0dfd.json","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /abc/data_3d0dfd.json HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11685,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff8bd3b3f1c9770ff3ce8ba226cddcac","sha1":"5855bdfd99e2bf2207f49fdfdfb877dbe7def3b6","sha256":"03bfae0b0e5713d3cba55ca6423056c31cb6e63c58b1db811bb4389e17fcff04","sha512":"b291cded877c6f1d707934d2b6dfffdbe67959993cb4fd9a369404e0a74776a99bdba414e6e827537be40eabe09ec30fd8c577f9d78e6449988af056b8c4ff50","ssdeep":"96:aRGCRJ7d0YhU2FvgnwcFYlM/cFkcFqJHFaVONWJXjVXqVXYriy15LfH21M75jATG:URJNNgnwcssc2cMwvJhqdmZSTWg3Vq","tlshash":"48329d777bb9687df7f015c89b193e69578d3023884c978627ccec3481785ba528b863","first_seen":"2026-04-30T16:05:29.464731Z","last_seen":"2026-04-30T20:48:12.132204Z","times_seen":44,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026tu.myxuanxuan.com/mt2026-8qssd0z7qb","fqdn":"2026tu.myxuanxuan.com","domain":"myxuanxuan.com","tld":"com"},"ip":{"addr":"43.175.65.14","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026tu.myxuanxuan.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 18 Jan 2026 00:00:00 GMT","end":"Mon, 18 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"89:A5:51:BC:5F:09:A7:47:86:8A:45:EC:EE:78:46:C6:17:A3:08:CD","sha256":"02:BE:A0:16:7A:20:13:EB:60:A2:1D:D0:AF:87:4C:A4:41:0C:07:C7:1A:35:F8:CA:F3:EC:E7:F0:21:5F:15:C7"}}},"request":{"raw":"GET /mt2026-8qssd0z7qb HTTP/1.1\r\nHost: 2026tu.myxuanxuan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 20:01:06 GMT\r\ncontent-type: text/html\r\nlocation: https://img.alicdn.com/imgextra/i3/2215209493335/O1CN010JTbhN1aVU01WrBDj_!!2215209493335-1-chatting.gif\r\ncontent-length: 138\r\nx-nws-log-uuid: 16095358581626345489\r\nx-cache-lookup: Cache Miss\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643569,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":1510,"timings":{"blocked":-1,"dns":1135,"connect":19,"send":0,"wait":250,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bot.ylg4.shop/800594.html","fqdn":"bot.ylg4.shop","domain":"ylg4.shop","tld":"shop"},"ip":{"addr":"104.21.5.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T20:02:09.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ylg4.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 11:07:34 GMT","end":"Wed, 01 Jul 2026 12:00:29 GMT"},"fingerprint":{"sha1":"19:A5:0F:1E:28:95:CD:6D:BD:E7:77:23:21:A3:53:DC:D6:5C:46:10","sha256":"F0:82:BE:C0:D4:06:8A:F5:BF:5C:2E:12:E0:DA:C0:21:6B:63:35:22:19:FF:79:62:DD:12:0B:11:48:7E:57:19"}}},"request":{"raw":"GET /800594.html HTTP/1.1\r\nHost: bot.ylg4.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 30 Apr 2026 20:02:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ciz.ylg4.skin/800594.html\r\nserver: cloudflare\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\ncache-control: public, max-age=3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OeknafWWdbJHncqrPrehl51iD99FxlDYDbH4Cf4DmCx13s%2FEgkuFA1XzPdCPqs4coehMJqkwmoMDMfA31XFgmp44O1H9ehzX3%2FjDmm2Dgfi%2FunjJnkmnNKsAVJdkEF1r\"}]}\r\ncf-ray: 9f492478e9f3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15318,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":27,"dns":9,"connect":1,"send":0,"wait":565,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/bootstrap.min.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/css/bootstrap.min.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 100231\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100231,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"3c24803b20ba58570b987045f5b7107b","sha1":"d6c8534acabe6aa3e9e591cd4aa079de1d311b83","sha256":"15940aae85e36a00a368d0351187586a8d7955d961fbda73a8fa12b3c27f7756","sha512":"45ebeefa74ac2d76c8547027513b08e4510781bb97da49bcfb85645cccc6ef666b42333f4183b53d25078b27e7b5ef9eba3662464e39fa48267e4431880bb497","ssdeep":"768:ZTkBUmlpztzuRdvGN6eABkdIUIbZbnbJN8gwaKNhL3tqNhkRQmNae:qdERdvGNIkabbRk3chs","tlshash":"67a39560f61031ae7063c65d70e0ed8726196053e66b8fb7f26b29e48f499ca1733f16","first_seen":"2023-05-10T08:52:03Z","last_seen":"2026-05-01T22:42:17.460914Z","times_seen":117,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 71518\r\ndate: Sun, 04 Jan 2026 07:17:22 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.001\r\ntraceid: a3b5f39917675110425676980e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache26.l2de4[0,0,200-0,H], ens-cache23.l2de4[1,0], ens-cache4.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 10068291\r\nali-swift-global-savetime: 1767511042\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:32 GMT\r\nx-swift-cachetime: 23593550\r\nback_uri: /imgextra/i1/2217565595682/O1CN01JKJBL71rqPYr9sHRK_!!2217565595682.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793334181474e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":71518,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"77124bec289e16c03715536db0a93a69","sha1":"5de89ae0a04b1f38fad10253e63173c0b686ad35","sha256":"a3485681d348a07947e41b4b1f4ae28733254265db0fd08ac9db716c3733c769","sha512":"5690c31f2995495454b1e9f46b74b696c0418985c5d49d8ab68975b731876e461df8cd05bb027cf3d871191a500bd273b649d037e9e1719c890784e368206c54","ssdeep":"1536:E8dgdKUYKUsoK6sIET9wjMr/JF+aPbqiuYZtJvfDD:E+zUvwhEBwjM7+YyYZtJvfDD","tlshash":"8e630233a165d51fd223253ca591909dba377fe1cd6671f9f6c7cf478a08083c9aa828","first_seen":"2026-01-04T07:53:55.650353Z","last_seen":"2026-05-07T01:19:54.871281Z","times_seen":5189,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:13.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 221348\r\ndate: Sun, 18 Jan 2026 16:19:32 GMT\r\nlast-modified: Thu, 13 Nov 2025 11:28:43 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L4-HIT\r\nrequest-time: 0.040\r\ntraceid: 9b66d7a417687531725638931e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache14.l2de4[0,0,200-0,H], ens-cache11.l2de4[2,0], ens-cache20.se2[0,0,200-0,H], ens-cache1.se2[1,0]\r\naccess-control-allow-origin: *\r\nage: 8826161\r\nali-swift-global-savetime: 1768753172\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 06 Apr 2026 05:31:32 GMT\r\nx-swift-cachetime: 24835680\r\nback_uri: /imgextra/i1/2207246784654/O1CN016SCogX1kFaOO1vIZt_!!2207246784654.gif_.webp\r\nvary: Accept\r\ns-rt: 1\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793336351732e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":221348,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 60","md5":"91a4c6f090426e12424905e992711b10","sha1":"a2cb6864351065d53d1c4c502877adfd11103e4a","sha256":"88584290d770ecec2239e81884a8bf52306a473d03aafbdb9a359555e3b9c439","sha512":"ce208676f2178d6a9c8498f495422167058647fabfe812391f392ada0df7088434bd33a8a718c4d24a53c7b9c77af94d83faf3815f6364c76d203f97fe9cdb36","ssdeep":"6144:k/sj3j3iWwPIu/wQFxkt8gRZI1ZpLugfoi:k/sjz3iVIgwUgRS7VffX","tlshash":"6124137ee1c01f226e0522e9a7b8bf1b05b55487ed84a47729bdf9d6c7482b3e7601c0","first_seen":"2025-10-14T12:40:30.101425Z","last_seen":"2026-05-07T01:19:54.88453Z","times_seen":9802,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v.ykv2.com/20260127/4lvbVHO7/1000kb/hls/rdG3y7YT.ts","fqdn":"v.ykv2.com","domain":"ykv2.com","tld":"com"},"ip":{"addr":"64.185.235.29","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:14.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v.dbocdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 20:10:52 GMT","end":"Mon, 20 Jul 2026 20:10:51 GMT"},"fingerprint":{"sha1":"EA:A0:9B:8E:CA:9E:C6:A8:96:F6:31:49:5D:A4:47:87:14:BE:65:70","sha256":"23:42:D9:79:2F:51:1F:7F:D1:8E:1F:8C:63:96:57:E9:34:2F:9E:1A:8C:AE:65:7C:21:67:C8:19:F8:FD:49:57"}}},"request":{"raw":"GET /20260127/4lvbVHO7/1000kb/hls/rdG3y7YT.ts HTTP/1.1\r\nHost: v.ykv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ciz.ylg4.skin\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 Apr 2026 20:02:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 310576\r\nlast-modified: Tue, 27 Jan 2026 14:21:21 GMT\r\ncontent-disposition: attachment; filename=\"rdG3y7YT.ts\"\r\netag: \"6978c9e1-4bd30\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nexpires: Thu, 07 May 2026 20:02:14 GMT\r\ncache-control: max-age=604800, public, max-age=604800, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310576,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"e0e2ce28dd233a5c629f7471478f4406","sha1":"38a92699e14601cc7ad754170a319c5c2ef791a1","sha256":"249fa775b90fc52c79b1927e6aff2f8375f3ddb74e6d4d5d091acb42e8f2aa12","sha512":"57793b567a6c79248ed705f0f5d08e4f1fcf22b095d961248f888709100ff48682f4f815dd540dc4039fc0ede8256b59b6b5f4454df7fc8ed5074add29fc72cc","ssdeep":"6144:39obGZzuQOXEXfk/qJJM3TUJ+B8SYfaAksKBuC+Bkn6/n:39o+uBEXfiqJawfSDqrNB","tlshash":"e364129e3b4c7d63e9630bf7589c8fab0252de504a4c5a666e7c7b9eb0f4389d112070","first_seen":"2026-02-18T01:25:29.443667Z","last_seen":"2026-05-01T23:12:47.294568Z","times_seen":23,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xy724-1.anvnjmc.com/kg/960x120-2.gif","fqdn":"xy724-1.anvnjmc.com","domain":"anvnjmc.com","tld":"com"},"ip":{"addr":"180.163.146.12","port":443,"asn":4812,"as":"China Telecom Group","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xy724-1.anvnjmc.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Sun, 22 Mar 2026 00:00:00 GMT","end":"Fri, 19 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"05:F9:C2:E8:8E:46:9A:53:42:A4:EF:DE:B4:DD:C7:F2:A4:1B:A8:60","sha256":"F9:02:71:4E:DA:4E:9B:FE:13:3F:35:E8:9C:D3:73:4F:26:88:90:C2:1C:68:98:25:7A:48:5B:43:E0:93:70:FA"}}},"request":{"raw":"GET /kg/960x120-2.gif HTTP/1.1\r\nHost: xy724-1.anvnjmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 336485\r\nstrict-transport-security: max-age=5184000\r\ndate: Wed, 15 Apr 2026 13:34:49 GMT\r\nlast-modified: Wed, 15 Apr 2026 12:37:49 GMT\r\nvary: Accept-Encoding\r\netag: \"69df869d-52265\"\r\nexpires: Fri, 15 May 2026 13:34:49 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nvia: cache12.l2cn8003[0,0,200-0,H], cache42.l2cn8003[1,0], kunlun5.cn7174[0,0,200-0,H], kunlun1.cn7174[1,0]\r\nage: 1319245\r\nali-swift-global-savetime: 1776260089\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Mon, 20 Apr 2026 02:29:35 GMT\r\nx-swift-cachetime: 2199914\r\ntiming-allow-origin: *\r\neagleid: b4a3921517775793343123019e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336485,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"e55caed931672fd8393cbfcce74e42ba","sha1":"90d723ecb4f1e36ac8b910179c640d11c4de02e6","sha256":"377a2f9c971d107740db20fc843024cf8961f0e9942b62057cca2719ee9e05e1","sha512":"b7e5a06478658ac7067c3ff5194e929ca53e2293811dfee9f52c0f6dc1dd5e9b9eed528fdf34f08ac80947c532df0b4e77f2dfd667a2b13df89863e97882837b","ssdeep":"6144:PhQnIgWfUs7L8cWpxlit5GQJjOVmaVMtZ3dOVLJHk1+j5lBp:PwIZckgbWJjOhMrkLVO+1R","tlshash":"5b64235a1408900167afbb3e0190dc953cb4c4f13af5a73f761a6158d7d21ae8eefb19","first_seen":"2026-04-16T19:31:21.190009Z","last_seen":"2026-05-07T19:04:30.78071Z","times_seen":822,"resource_available":false,"data":null}},"time_used":2880,"timings":{"blocked":-1,"dns":1267,"connect":261,"send":0,"wait":252,"receive":814,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fsffbhd.brffff.com/9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818","fqdn":"fsffbhd.brffff.com","domain":"brffff.com","tld":"com"},"ip":{"addr":"172.67.71.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:14.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brffff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 19:12:23 GMT","end":"Wed, 17 Jun 2026 20:10:57 GMT"},"fingerprint":{"sha1":"58:F3:6C:D6:53:06:24:55:BA:3E:5B:04:62:48:06:6F:B1:75:94:70","sha256":"F0:5D:1B:60:07:9D:34:05:71:DA:8E:2E:A0:0A:88:B3:C9:73:D8:E0:48:6E:6E:42:72:7E:D3:97:36:1F:D2:07"}}},"request":{"raw":"GET /9acf3f15aa2f10616fcec1e9f8124088.gif?_t=1766049818 HTTP/1.1\r\nHost: fsffbhd.brffff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 596432\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FoO6oJ1b7W2xdQiMSBoPb4joUSM0ZM%2BqhCIVTomz4WTEWAauS8gaPsOFdwrVfwkiHMO%2BFyIXZYJehNW7VbSkWChFbri7qbMSuwEopVETFy107Jo5lAAF1MpLvksNy4CICE6nw%3D%3D\"}]}\r\nlast-modified: Fri, 12 Dec 2025 13:55:30 GMT\r\netag: \"693c1ed2-b42e7\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=738023\r\npriority: u=1;i=?0,cf-chb=(782;u=3;i=?0 1954;u=4;i=?0 77885;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6590\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9f4924966a660daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596432,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70e27bd33ccc423d6ca629fe1a2694a3","sha1":"8f9b122d30952f553d18eb43f1a0d8fa43616f05","sha256":"2e4d5ced9b2775a2fcf90c86296064a475d629e3abfa9bc388d4c7e58a924b5a","sha512":"ccc4192c2f2d5bfdf26a698e8c1b065b607055b3c5cff1a3a3b5bbfa8cc0b1631d7d281bf5028d596a6ffd4f757b5f362015caa1b480563f58d7f8a32c3e79b4","ssdeep":"12288:o+1WCsh1cclbxyjPvVfdwCAqlH3JbHk55dJt9uMYpNlR:oush1cobxcGOHW5J5YT","tlshash":"32c42345e8fe2db59265a33cacf61a129dd700e96cd520591c9aff633ce0a4705ecf48","first_seen":"2026-02-12T00:35:26.594188Z","last_seen":"2026-05-07T01:19:54.916083Z","times_seen":3327,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":46,"dns":23,"connect":1,"send":0,"wait":8,"receive":22,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3ccefxs96519j.cloudfront.net/MGM/980x120.gif","fqdn":"d3ccefxs96519j.cloudfront.net","domain":"d3ccefxs96519j.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.198","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:15.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /MGM/980x120.gif HTTP/1.1\r\nHost: d3ccefxs96519j.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 95663\r\nlast-modified: Fri, 08 Aug 2025 06:03:40 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 27 Apr 2026 03:19:14 GMT\r\netag: \"5a8005b75112b36916f21318ae457043\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Pw9d7xg60ZAc0-3R0O_kIQpm_0lQhHvL-PQA7y-vg3kByN50sowBLQ==\r\nage: 319382\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":95663,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 980 x 120","md5":"5a8005b75112b36916f21318ae457043","sha1":"180f1ab095baa331066bf1708261d848d55789bf","sha256":"21b3d38760be3d6aaa1088bd68000cf9a0bd24b91baa7e4a93647a97f4f07e7d","sha512":"64180ea90a0dfec12e275bf1f6b3674bfcb69393177e726cbd5c6b03bc091acb7ad77429f6154f96e6071db087131f467c507c1fd95224faac5660fa71635d45","ssdeep":"1536:E2YoK+ONw4XmLHmnjNZ3CTtyO+cL2g1nB+VFS0O6QXkHv288jVG187LWL:77zONw4XqGnB1CxyO+c6cB0O6S6v288s","tlshash":"6c931279b8e135395715549e88ea6b0229ec29a1dff8d5e0fd3ffbe012400fba084752","first_seen":"2025-11-17T16:26:00.337909Z","last_seen":"2026-05-07T01:19:54.875023Z","times_seen":7484,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":40,"dns":723,"connect":17,"send":0,"wait":2,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/css/a_pc_wap.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/static/css/a_pc_wap.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 2876\r\nlast-modified: Mon, 24 Oct 2022 09:16:10 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74a8b81d486fd0fab0c1e1a21faf815c","sha1":"3671d10e96160cba777510eafe225a6fab98dbdf","sha256":"db0fd01915d66b5e8e03851256f02c85422be168cf9b2b68ab776878447f9e1c","sha512":"9399229eae7fd56b29d69e0cacc7b2a439aa45fb392df8549e04ed3fd81ee280694bf2a96acebdfc759862fb7a863fcba5e4adc4228c40bb25ac75fbca504226","ssdeep":"","tlshash":"2e515a162b6f2488a80ba1b85fb567686a294053bb0fcc2975547324ff4e78d09b2789","first_seen":"2023-11-16T12:30:34Z","last_seen":"2026-05-03T01:50:52.87715Z","times_seen":10055,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/player/dplayer/DPlayer.min.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/DPlayer.min.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript\r\ncontent-length: 114364\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"09d64431d4e71dd79e0293cb254a58bf","sha1":"4093ba933f60bd05c3a482433b2f2b4bf48cbd9a","sha256":"9b2262ea70b613bb5eebbd14963a84c8aa3903cf99f2e0fdd33cae11b1f046d6","sha512":"35ca04e32808ccb3dca2ba6702aa21fa9b26874fc8ceeb44d0f11821f39e1f65288ef2c72fccda8fa18248d84ba86a2a9e835e66454e127fee8ba3261fe5f218","ssdeep":"1536:mDLwEEYwSIZLZX9GSzlY6G4nX8yWLo6DJCYXoanq60IsgGvHk:+PwdJ+St+AXGv","tlshash":"28b3d7983394e071029365f4c51f16093232627de986a658b63ceeec8fb8c8d6537fb5","first_seen":"2023-03-07T14:15:35Z","last_seen":"2026-05-03T01:50:52.637523Z","times_seen":12017,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/images/fontawesome-webfont.ttf","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/images/fontawesome-webfont.ttf HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/octet-stream\r\ncontent-length: 112160\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":112160,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"FFTM\", 14 names, Microsoft, language 0x409, Copyright Dave Gandy 2014. All rights reserved.FontAwesomeRegularpyrs: FontAwesome: 2012FontAwes","md5":"c4668ed2440df82d3fd2f8be9d31d07d","sha1":"6225ccc4ec94d060f19efab97ca42d842845b949","sha256":"4d6eb9e9d852a2a6f74e7c428456a2f07fc63a1613d10192d8ed3401d9da5ffa","sha512":"ec66825d9579bc96301b5c123bcec3fe950ba75ee91301355494017cdd48c74d6d23886e3ad0929307e261200351013176bc7dcb4da1f13f7f9ef31bc395a5e1","ssdeep":"3072:l1DuCzsU953sdVP9Xsi0iEPGQCMD17VJG6wVchwDgj6JrMc6SfGc2aKII7jw0Xe:l1DuCzsU953sdV1cZiEPzCqVVJG6/hw9","tlshash":"43b37c7ea7f9ce7df08257bc8c6735910ab66f10f32ae947b74db476742a040812864e","first_seen":"2023-04-08T15:24:49Z","last_seen":"2026-05-07T17:16:44.954399Z","times_seen":242,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/favicon.ico","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:15.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: jump_visit_count=1; user_pv_count=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Fri, 25 Nov 2022 03:52:59 GMT\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\ncache-control: public, max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"8c78048a02a1e1e8b7b71a1dc3e1daaf","sha1":"62c770a9391c24398ab7f93afac33f887361be2f","sha256":"d9f0973447963b181599e3bbc55a456ea0bd6844d785a1e0ba6aa4811ff94dab","sha512":"f932606bc8cee8e4c39c8fcdaeec571fb961f490943aae8737ade4fd026920411087cfa230be1aa3f4ebfd4c2e2abcbdc0bc21ed929c7d49ca168889ece1dba0","ssdeep":"48:9EVoooHaj4u+DJKM2PQ7ZWfa+pdyEPCu+MJRoscbl/fb0XW8UEYJB4O7WN/6q8mL:9AjHCWfN0K/Gb0iEwaNiFoF","tlshash":"8b1293e3b684c3bac8238274e026d772c6390e1743e952492e987d6b74f39b1002f16f","first_seen":"2025-10-01T16:58:36.098613Z","last_seen":"2026-05-01T22:42:17.465073Z","times_seen":65,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/000/flink/analytics.php","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"POST /000/flink/analytics.php HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 9\r\nOrigin: https://ciz.ylg4.skin\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":9,"data":"referrer="}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: https://www.xzylm.com\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nage: 0\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/800594.html","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T20:02:10.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /800594.html HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/html;charset=utf-8\r\nvary: Accept-Encoding\r\nx-frame-options: Deny\r\ncontent-encoding: gzip\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSf ])\r\ncache-control: public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":15318,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14142), with no line terminators","md5":"99f3f1ef32b3adb1f78ddf68725cbf8e","sha1":"37599fd4ae6728f2a98308129c25ac05241dd928","sha256":"afb1c295d7a32396620bb740042519c194f935d24f7076526b3e82f2d7b992a7","sha512":"a333ce328aa6a6aca4c2eade0c577373fe90aad692f57d58c303a8b7daaecf68ba2e34839751412fa27e689e9367a03774110f1da5cc0ab68858f2be5a41f900","ssdeep":"384:DMrVAnBjqI5QV6epLvCWDJjJDFbzhk65AF:AGnBjWV6YC8bzhX5AF","tlshash":"2a62c8222989b43ba12758d87991fb1db0730259cf464f3075f5bbbdc7c2f91025aa8b","first_seen":"2026-04-30T20:02:43.35358Z","last_seen":"2026-04-30T20:02:43.35358Z","times_seen":1,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":360,"dns":32,"connect":156,"send":0,"wait":222,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/abc/fixed_jump_df6ff8.js","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /abc/fixed_jump_df6ff8.js HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cMsSfW])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"bbf9d8d3401742a288e5d339af1bd4b2","sha1":"df3037077c84a4150f1d1a0d94f642b12fdbbf55","sha256":"81f6987545729537b17650efc28fe7042dc7b4cc94f66d0ec6f06414e35711b0","sha512":"849b194301588583e73eaa1d62101dfd1a2be7a3f007881c843379943fe0933676a298c7da5f7ce750d7e7799a9fe9f3d77d62d14feaf364a30c645c6e28a52b","ssdeep":"","tlshash":"19711c5c64d730d32057313a5fdf150836b694032a0ade04bd0d66b02f90b2baab6fed","first_seen":"2026-04-30T20:02:43.354927Z","last_seen":"2026-04-30T20:02:43.354927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1019,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.alicdn.com/imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif","fqdn":"img.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif HTTP/1.1\r\nHost: img.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/gif\r\ncontent-length: 494827\r\ndate: Sat, 25 Apr 2026 12:48:06 GMT\r\npicasso-ret-code: SUCCESS\r\npicasso-cache-info: L3-HIT\r\nrequest-time: 0.002\r\ntraceid: 2ff632a817771212864386534e\r\nx-powered-by: Picasso\r\npicasso-image-type: normal\r\npicasso-fmt: gif2webp\r\ncache-control: max-age=31536000\r\nvia: ens-cache6.l2de4[0,0,200-0,H], ens-cache27.l2de4[1,0], ens-cache8.se2[0,0,200-0,H], ens-cache1.se2[2,0]\r\naccess-control-allow-origin: *\r\nage: 458046\r\nali-swift-global-savetime: 1777121286\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sat, 25 Apr 2026 12:54:40 GMT\r\nx-swift-cachetime: 31535606\r\nback_uri: /imgextra/i2/O1CN01kPy0le1mH4wrdd17B_!!2221328234928-1-fleamarket.gif_.webp\r\nvary: Accept\r\ns-rt: 2\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9517775793322618321e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":494827,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"45806dec686318980d36e9704bdfda3f","sha1":"7ed038b86a2a85dd2361dc0ad67fec6fcee29bb8","sha256":"def6e19d6adc0d1dcd41d757415f970dcb91c5432677eddbe7a9542214858730","sha512":"a8dddc397c4eff9270987108d6eaed64964d02f6ae47fa2ca351616ee8bd4a6fcb30be39641a7df291098e4805ab005be9f15af46f5554297dbe430929c799ed","ssdeep":"12288:uAtRwZlD+bb6Vjb5V0/8Tu9rE6UV5N50SAKoRbkcmp3u+/Q:uAH6CF/Z9rE6Ubn0SXoRbpE3u","tlshash":"84b4230dd5a38d74f23bfc353c16d7ee451b22380da825433e2b7ab764a2a12c1196e9","first_seen":"2026-04-25T13:45:42.346399Z","last_seen":"2026-05-07T01:19:54.909747Z","times_seen":716,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/static/player/dplayer/DPlayer.min.css","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:10.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/static/player/dplayer/DPlayer.min.css HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ciz.ylg4.skin/800594.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: text/css\r\ncontent-length: 44172\r\nlast-modified: Sat, 13 Jul 2019 08:31:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44172,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35598)","md5":"d3c6a2fc18c932411a9d5bf59de343f7","sha1":"bbfcb2564dd7643cf54c27e464de586cb3ef0b8b","sha256":"d444e7a8144bfd5ae078141c64d855c9c89cc1482dd6e8085fb5cf76dd84bc9e","sha512":"2d1d999c64131687af46743e502022e8c7a7be1e240e17a0233a32c186609f559e6d01822e99dfaa0dc43f07aee6fca5a1c36bf4e4bbfa89a6eb80d6d5f36380","ssdeep":"768:7FK8KSkZqtIfw3YH4ZqtIfw3YHMVHYr/hizxdUDr5+qsGif0y9g:wHYr/hizxdUDr5+qsoyg","tlshash":"5213bc1618a5329891225b91cbc8676c6738d312e9224f8ff31b780ecf8e69d215ff57","first_seen":"2023-05-12T08:10:23Z","last_seen":"2026-05-03T01:50:52.427311Z","times_seen":11673,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/images/header_bg.png","fqdn":"ciz.ylg4.skin","domain":"ylg4.skin","tld":"skin"},"ip":{"addr":"98.126.18.106","port":443,"asn":35908,"as":"VPLSNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:11.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ylg4.skin","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 09:37:05 GMT","end":"Tue, 21 Jul 2026 09:37:04 GMT"},"fingerprint":{"sha1":"DE:F2:22:FA:10:60:EA:D0:C3:E7:AD:E6:CF:3F:0E:35:3E:77:25:4F","sha256":"1B:B1:7E:52:8E:CD:70:D3:CB:4B:6C:09:DE:87:50:4F:B7:EB:C8:CD:E8:89:AE:77:71:A5:BD:27:3F:A0:A5:E4"}}},"request":{"raw":"GET /cn/home/web/template/061vip2_wtpl/images/header_bg.png HTTP/1.1\r\nHost: ciz.ylg4.skin\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/cn/home/web/template/061vip2_wtpl/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: https://www.xzylm.com\r\ncontent-type: image/png\r\ncontent-length: 515\r\nlast-modified: Wed, 31 Aug 2022 08:23:07 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nvia: http/1.1 traffic_server (https://www.xzylm.com [cRs f ])\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 376 x 4, 8-bit/color RGBA, non-interlaced","md5":"72ed8e9684adb4a177e6412d102d8af9","sha1":"60252d6aaf6d736e50a724b2ad96f1eb0b4f26c6","sha256":"5e04e76048762feb4ab00303a025f9adeef533597555d79a7a79b484435a9a14","sha512":"f3d93c0d4316190110e90c891de43ad8b54169278b1707d2150055436534f2281bc706e64fbfed7f28135b648f32d4346940c59df046f18887799ed57f4c6827","ssdeep":"","tlshash":"caf075e5fe1f402ceb9781f0060361c12932dbe311040a094c43ccee05f62d41300439","first_seen":"2025-08-12T07:54:21.3573Z","last_seen":"2026-05-01T22:42:17.49208Z","times_seen":81,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3plus.meituan.net/opapisdk/op_ticket_1_5677168484_1774356515126_o0wVijyr_vip.gif","fqdn":"s3plus.meituan.net","domain":"meituan.net","tld":"net"},"ip":{"addr":"138.113.181.2","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ciz.ylg4.skin/800594.html","date":"2026-04-30T20:02:12.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meituan.net","organization":"北京三快科技有限公司"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 03 Jun 2025 10:52:10 GMT","end":"Sat, 27 Jun 2026 07:00:02 GMT"},"fingerprint":{"sha1":"0C:29:B8:8B:74:6A:6C:C5:4B:6B:8C:7E:F5:C5:E8:A7:B1:26:B8:CB","sha256":"40:B3:D3:3A:FB:0A:FF:94:27:86:35:5E:B7:62:00:AE:DE:30:88:34:15:60:5F:60:9F:C0:E2:9D:2E:BB:5C:83"}}},"request":{"raw":"GET /opapisdk/op_ticket_1_5677168484_1774356515126_o0wVijyr_vip.gif HTTP/1.1\r\nHost: s3plus.meituan.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ciz.ylg4.skin/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 20:02:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 587023\r\nserver: openresty\r\naccept-ranges: bytes\r\ncontent-disposition: attachment\r\netag: \"0560df56b4b25552494a89834ae9165d\"\r\nlast-modified: Tue, 24 Mar 2026 12:48:35 GMT\r\nx-amz-id-2: 6024db94bcc751975329e5a39b0394b3\r\nx-amz-request-id: 12181514190734381400\r\nx-mss-trace-id: 12181514190734381400\r\nx-route-trace-id: 14145355207639978327\r\nx-amz-checksum-crc32c: OFbowA==\r\nx-amz-storage-class: STANDARD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncache-control: max-age=2592000\r\nx-via: 1.1 PSxjpSin5es155:11 (Cdn Cache Server V2.0), 1.1 PSfgblPAR2ab92:4 (Cdn Cache Server V2.0), 0.0 PS-ARN-04kSW118:11 (Cdn Cache Server V2.0)\r\nx-response-cache: edge_hit\r\nx-ws-request-id: 69f3b544_PS-ARN-04kSW118_10319-561\r\nage: 717890\r\nalt-svc: h3-29=\":443\";ma=2592000,h3-Q050=\":443\";ma=2592000,quic=\":443\"; ma=2592000; v=\"46,43,39\"; ma=2592000,h3=\":443\";ma=2592000\r\nx-cache: HIT from cache.51cdn.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":587023,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 120","md5":"0560df56b4b25552494a89834ae9165d","sha1":"7c2d66766e485c4445f2229aac46978a6c7ba337","sha256":"727eb72c6757f6fed65236c73499282880a2743f046491e67777c5e0b16c0b16","sha512":"f11ae028985d47cb96cda91a59ccad5d695ec5ceefc8617627fe425439a62dae3cb3e0d6039eafab54b1b944f26a3fa2cc9f092c568635d0b19c5637661aaee4","ssdeep":"12288:e3ZLlnu4p5K2/14yypiaTG/PJ/48QzXzpOuObglUQme0:ch1p5KApainJo7Obgl8/","tlshash":"bfc4236d50fea1016f73b586287f0758663e3a05b591d0de309da8b3860e1da0a3ddfb","first_seen":"2026-04-22T16:27:33.190434Z","last_seen":"2026-05-04T05:00:58.197776Z","times_seen":757,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":137,"connect":9,"send":0,"wait":8,"receive":42,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}