{"report_id":"7cfe5372-e23e-4f91-a2ae-8f1dd3e0a954","version":6,"status":"done","tags":[],"date":"2026-03-09T14:02:59Z","url":{"schema":"http","addr":"zktdsmnvipbvas.top","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"104.21.2.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"title":"DISVIP","dom":{"size":12949,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7661)","md5":"70df5826b13a7a0debb9a445f7a13e78","sha1":"860f43a53f9fbed2a425e7c4bf96d60e263f26ed","sha256":"82af9bc3b85767263c0b8e70d8af6879201ff291dc78df9778b5f9f8b8dc865c","sha512":"a53c088184cd3957d27add05650835a4c712950063718b06d669a121ae78b10fc18eb8ba78619b4302a10c1264f698c6c7da8628b00136f8467b6ef18d56cac5","ssdeep":"192:e1/lx7nUqRGKYCIHL+QeJMZCxfw2nfD3bqq6BfT/a4WadB1XYeYQfI:AlqHL+JJMZCx42WBepwI7QA","tlshash":"9c42b7ed16995c184e9fc667b8f2e148823096ad81015e10f89d60be4f88af4f7dfe17","dom_hash":"domhashbf721125661fd47f3618fb8e7a807f86","first_seen":"2026-03-09T14:03:06.06463Z","last_seen":"2026-03-09T14:59:02.293108Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zktdsmnvipbvas.top","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"104.21.2.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T14:02:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"zktdsmnvipbvas.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":11134321,"sent_data":5138,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"h5-api.disneysa.top","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2025-10-12T16:46:48.050578Z","last_seen":"2026-02-26T20:33:26.30487Z","alert_count":0,"request_count":10,"received_data":6581,"sent_data":5749,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c3eaa377978e9c1f32558613a628974","sha1":"e32b06e97397c5a47efefa22923fcbb5d2060086","sha256":"9b2c6134e801201ff044ef2cc50aaf589dd24222f10b7d648e39b9ffe6036559","sha512":"976f93f863a4c38be2e20ea94b75042aed82963505b1e58018c74ed999ccfb59c08fa9f789c11ebe6b0f912e865f97eb7962866a86ea21a5d8d20a79847b23aa","ssdeep":"","tlshash":"9e11abfe191a702d6303404e976b7811642250f9001a184177cc9e9dbb9abbdd0cfb8d","size":1048,"data":"","first_seen":"2026-02-26T20:33:34.924796Z","last_seen":"2026-03-09T14:59:02.329761Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-19T21:52:20.459988Z","times_seen":101015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/charting_library/charting_library.min.js","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-19T20:09:07.785956Z","times_seen":1370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/ac-chat.js?2.2.1769012855833","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-08-18T13:49:53.243641Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-19T20:09:07.802497Z","times_seen":41681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-19T20:09:07.803109Z","times_seen":43110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/#/home","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3f2605bde342441a22c4f9855dc71b9f","sha1":"8f92d2195eae78263bdf685edc7098814627ae34","sha256":"a7b2d9be8dc7a620a683964c5b6cc4d90a01c610be35e2472a3ba4fb68bd462f","sha512":"747b5822ecd7e17503d1076745818f06edc89060862bdaf8c0b553500d560c52eee06dcb4261277648e2c18e523584cde9e60abca56659145dea7e551bdf095a","ssdeep":"","tlshash":"38e04ffb36b295486c44422959cd1e22b1518237dcadba5c748c2d009f9f52c0678436","size":343,"data":"","first_seen":"2025-11-21T07:12:48.197866Z","last_seen":"2026-04-21T18:06:11.96238Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.disneysa.top/api/common/getCoinList","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:41.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://zktdsmnvipbvas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 09 Mar 2026 14:02:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6428\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9d9a9e6ca8dd9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":1208,"timings":{"blocked":194,"dns":158,"connect":8,"send":0,"wait":802,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/assets/index-zIieSAXU.js","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:38.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /assets/index-zIieSAXU.js HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ef6-74b2f\"\r\nexpires: Tue, 10 Mar 2026 02:02:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7UoJbumVf2odQZJWiCmCJSha5QuFsARNruNPlJr25tTYGSv2H1W3g6UuU%2F6RCQAruZWhwYw1JXZXiqMzo0xWs%2FNLbX%2FgvxmMOpYgpNzuiRpBvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e546c3a0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477999,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"0549f55da1bae68f0d15fe5e3d72dd41","sha1":"6437d59309f990e8eec87694b43305526d676438","sha256":"2c55d27a31c0db71456c522e0ca69e13c5882fa6c246e2b850f55e24290310e2","sha512":"3a6673e6686587992daa0572d627c5119b3f164e04d272a2e8beb216174dc08d64b1049f27ecb81349c1531c10143247fe998ed324c9e190c2b2f6dd4aa75ac9","ssdeep":"6144:EYXkbumb0dYmSGs9gLb0d/85KBtYiLUO4MSA:1XkbumrmK4KBtYiL/4VA","tlshash":"eea4f741f957997ee7b66854588d2400320c3fcae00888e6f5fe9d0a67a7cb8776db34","first_seen":"2026-02-26T20:33:34.921037Z","last_seen":"2026-03-09T14:59:02.308331Z","times_seen":3,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":240,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/assets/vendor-LktEFzIi.css","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:38.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /assets/vendor-LktEFzIi.css HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:38 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ef6-20581\"\r\nexpires: Tue, 10 Mar 2026 02:02:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wsEbOEe2PhaZ4jQ%2B7rmE2V007tZ1EyMSzQuQ1YsF2pkbx5IHAwu69zi1Xp56hBJwlwB%2F27vrv3ssSzz0x2mvmi2dEn5MVfuN6ZVITpoFxnkLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e546c3f0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132481,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"e8309ca90ddbe375af9814bec4788bfd","sha1":"82533ac62c277a0e607fb774c719de2218305f49","sha256":"979b9ccb6c17ca686933f0826d3f873b1bd437c4af8036db5f88abe8a9414317","sha512":"4e57d610fdfeb997f3e413b2fe8de6d71a13ef7f38950066a27e878763193756de8276273dfc13fbe6830ac8a2c9a34d58085265f6bac4eff4f7c6bf87b08846","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D2fMIG1Ah5aIz1:BnNIClDsIxuVS8Sdt7","tlshash":"72d3b5a5a6c491bc6f2bf2759b8766d8f23cf661cd01daa4f105511c0fc7bf50223a2a","first_seen":"2025-11-21T07:12:48.154799Z","last_seen":"2026-04-06T13:15:18.428365Z","times_seen":11,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/assets/index-ePmH7jJq.css","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:38.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /assets/index-ePmH7jJq.css HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:38 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ef6-9528e\"\r\nexpires: Tue, 10 Mar 2026 02:02:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7Gu%2BcUzndjMnrJUAp5nf%2F1a02SZFZAxfxfj4w%2BHfaaryU%2BXWM0O5lReNLcV7RJ4DWtDjou3eluniHaBfYlkAkXnPB45Pm%2FceQZXAbSArernpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e546c410d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":610958,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"7c9b9b9ec164cfc0a60e02d5ba0c5149","sha1":"ae4d99917e11ec777971e363f26bb0557dca2fd3","sha256":"3f10c4565e07697b864feb580c599dcafe28164a87d697f546a5939bde97715e","sha512":"0ea46e4228a68a8bb7084fbcd8dcdebbe16a3dfb34e7e5d912215f459cb8473f84fe21dc8e3123f680c68f3124c3683be2687807ea0f5dccab10cff810d15a4c","ssdeep":"12288:Xv1a9dZ8w71ZACkFDS3vyf58rBeV05Tvk/Bt9itXMsmfXe/o:Xv1a9dZ8w71ZACkFDS3vyf58rBeV05T+","tlshash":"1bd4e969b59411386e37d5a9bbc85acce12cfe61c8029ee4f243541a0ec7bf7236171b","first_seen":"2026-02-26T20:33:34.911246Z","last_seen":"2026-03-09T14:59:02.324071Z","times_seen":3,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/assets/vendor-r9x0t6uB.js","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:39.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /assets/vendor-r9x0t6uB.js HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ef6-415d7e\"\r\nexpires: Tue, 10 Mar 2026 02:02:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X11D%2Bj6zsgn0d7MegMWK7hWqo6ghjS6HowAl7hruLXMLJZnhO8gYJgWxGfXvESreCPq%2F6no%2FmCSzIb2KYwvbOUd%2FIyOud0SEg5XCep5X9Wg2aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e59ea6f0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4283774,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a87d72efa2a29adac65654ded418c56b","sha1":"0232d5ad95cf2274fc833c2e4e1055a3737cdf54","sha256":"bbf3688623edaa151085d47db9826a56335a6f0e1d712a95a06880e07fbcff32","sha512":"7ee509bd75aa1ad15551a207c40e822eed06cdf21d16ee069dd66077ac003bed4120fe95a2528bc6550459454f593eeb0347b20f586a9069682f88a8bdd363e4","ssdeep":"24576:XHPxZ7TK0rfIVYTEefTSZj+Pxhtxx1wJAfihLlE0lBkXZLZf5/ePC4s+1SL8iHwg:Xv77e0rfgYTEefT+j+Pxhtxx1wJAz3Z5","tlshash":"c9252bd8b285f02143a721f5407f140bf3395a1d784e84a8f669d8da3cbe849627bf79","first_seen":"2025-11-21T07:12:48.160038Z","last_seen":"2026-03-09T14:59:02.313609Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":665,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/3afde63e-5dd8-445c-820b-eae49a050506","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:41.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/3afde63e-5dd8-445c-820b-eae49a050506 HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7L4Y+E4MIUwHChwxyWIySg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e7O9ePAEcjTZMXA3tn%2Bv5hbi64sMwMwrB5%2Bhp1hMJMj2FQEKYwc%2F0m3CiDVcSJ%2BQuh%2FS9EoX33aJ4nWfCzhRaM%2FUZ1s0QcaZJpb3%2FUUvRSF0PWz7IlQZBYVX7e5k%2F%2BguBHiR9IkQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9e6d098c0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":0,"dns":58,"connect":57,"send":0,"wait":797,"receive":1,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/1ed2b7aa-2f91-48ee-84c1-bca5508af3f0","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:53.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/1ed2b7aa-2f91-48ee-84c1-bca5508af3f0 HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: BOL43jsovo69o9hyFtSfgw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:54 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4S4KwWKnbOKvgiHSSmJwRtvSZWWTS5Il6DTJU3vrE9gNKGrtuWq6t%2F%2FTSn8975VEzmilEPpByD3vjlo1qnvx1BwIKcHjgWeivDBCAuNxYQ5sVwg8vTP7UEmNSMnb2LZqRazNreZs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9eb62ecb349b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":839,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/resource/fonts/Arial.ttf","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:39.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zktdsmnvipbvas.top/assets/index-ePmH7jJq.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:39 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\netag: \"69716ee4-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2B2E7dc1k2DIld0E6f047Hr9ADjH1unvM86VMu%2B4HA46dSflP03%2F2NaYsoAqiLMWh7ibWgv1YqlEoC8dbVBDSX8WgtgZnRJTiQzVlRJqypKHBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e59b9e80d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-08-19T20:09:07.793305Z","times_seen":2247,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":753,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/db46b73a-f98b-449a-abca-c053e798888e","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:48.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/db46b73a-f98b-449a-abca-c053e798888e HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: BzzI1NTEYls8cYrhDAdxRw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TSLphCBge1UeEgLB8o8RJ09%2FlnZCxnkOoa1c6LEfoj7Yqhr%2BqrwUpat680JV2T2x0V0ZlFzuVU%2F%2BUAob520MKHJzNnq2pNAHBmXZyj44qzSrKSRCoU6pt8e6mryUbIShBa0udnG3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9e928c4990fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":793,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/e6a6ea06-a9d9-4cbc-a826-1acf9ca8c78d","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:50.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/e6a6ea06-a9d9-4cbc-a826-1acf9ca8c78d HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: t2b9y31DGzwWq6aDT4GqnQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K8uWg0KDMwBCf3kF36L6PfSJRKRg8pTak%2BUBBYPGzmC8GGYUZZKPZIbRUS1rn1Kv1EUNCUVCqmVfFFDBclfaazHe0vT7AotvK7dqm8tba24rdB8K01eOilqFGSEPUqdI1MbpueHJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9ea1cc79767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":848,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":810,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/charting_library/charting_library.min.js","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:38.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ee4-2a6a\"\r\nexpires: Tue, 10 Mar 2026 01:58:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 226\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAt7gv6EVUbzRKLpHeWqHhS%2FLZHoliknv4pOu9wNAbNf0R2Cqj37V6C19uvHp%2FGfxJaGZ0aJjQwSvTU8tnoLa9XLsU9tTSBD7FTnw8PGOoAxbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e546c330d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-19T20:09:07.785956Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/ac-chat.js?2.2.1769012855833","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:38.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /ac-chat.js?2.2.1769012855833 HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ee4-907\"\r\nexpires: Tue, 10 Mar 2026 01:58:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 226\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaBUdLT0ZwRU5EMODNpJ3OcQQd18psaQXs2ByDfPR19e17BrNhdi%2FA4TnulbZ3Ut6ZWx3t5jPGq0JFdrg4LWHgNV%2BQ5efKHAXnBLpwAxo9SM2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e546c480d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-08-18T13:49:53.243641Z","times_seen":146,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/platform/disney/logo_144.png?2.2.1769012855833","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:40.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /platform/disney/logo_144.png?2.2.1769012855833 HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 259787\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\netag: \"69716ee4-3f6cb\"\r\nexpires: Wed, 08 Apr 2026 14:02:41 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0x9D0EMJ0EwM1Hs9hznV7soFlbbmQ3kFypCmnhvfHQ9Kz%2BVrk9QlpqaQQuw11z0AGAnGByPmYmx%2F3xiN84rb3XGP46PC8I25UXC8Ew3wDyyzqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e64ed7a0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"31adad557149f6e970077b45ad780387","sha1":"beb0c03975d2c4d6cdd0bcde14d9ab79fbca14fd","sha256":"1ed7bb19c196a79fc188efbdf6a99c6cf025d77c5b0eb38f983b4c1ad1d06460","sha512":"df64375409fe4d19ea4b8084bd7b92c755c4bb9709732545b94ec8c3e2797d2a05f35d037d83b9ab1d538d1d200d2f1afd91b03dac9a76d8a8f5fa067a50a4e5","ssdeep":"6144:8ooWNKL6eiw9g6sRRnr8EE9ZEU8Q0oKmAZlrP934kaS:8oDKziw9g6sRRni/50onAX9","tlshash":"1a44125ee4c5c919ebf292b7837b0520a33904105f9948da8322623defa5ffd75c462e","first_seen":"2025-11-21T07:12:48.17463Z","last_seen":"2026-03-09T14:59:02.322231Z","times_seen":8,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":377,"receive":479,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/assets/vendor-r9x0t6uB.js","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:41.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /assets/vendor-r9x0t6uB.js HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69716ef6-415d7e\"\r\nexpires: Tue, 10 Mar 2026 02:02:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iaeIMwVyJP0csZszLZo8FSAyiRMrhZFYZoeZuk%2FNJ%2Bk3VmYjPXAXHKBs4qF7wmPpMbfG6cnRYjINmX6y66D9ZVXCDGggXQvycC535PSO7wWewg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d9a9e69c9fe0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4283774,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a87d72efa2a29adac65654ded418c56b","sha1":"0232d5ad95cf2274fc833c2e4e1055a3737cdf54","sha256":"bbf3688623edaa151085d47db9826a56335a6f0e1d712a95a06880e07fbcff32","sha512":"7ee509bd75aa1ad15551a207c40e822eed06cdf21d16ee069dd66077ac003bed4120fe95a2528bc6550459454f593eeb0347b20f586a9069682f88a8bdd363e4","ssdeep":"24576:XHPxZ7TK0rfIVYTEefTSZj+Pxhtxx1wJAfihLlE0lBkXZLZf5/ePC4s+1SL8iHwg:Xv77e0rfgYTEefT+j+Pxhtxx1wJAz3Z5","tlshash":"c9252bd8b285f02143a721f5407f140bf3395a1d784e84a8f669d8da3cbe849627bf79","first_seen":"2025-11-21T07:12:48.160038Z","last_seen":"2026-03-09T14:59:02.313609Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/3201eb8f-648e-4c41-ac35-cfb65d569cb1","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:44.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/3201eb8f-648e-4c41-ac35-cfb65d569cb1 HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: d8IhZV/5KeLkuZwlJXUoRg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:45 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Mv8ILLyNIdVnYI6SDKx43%2BaANPIpP7fdJd0bq%2BtgPs3SPwo9086nSUvwtPg8f%2FiDQ6DRj%2Blv7x1gkPtnC2%2B2PYE3kS9qjqsOa%2FzoiEWmNojK2hvxq16GaTIqiRKhWQIHtDKM2VJR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9e7caec39e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":863,"timings":{"blocked":0,"dns":1,"connect":14,"send":0,"wait":819,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/dea056cf-a46f-4532-b461-282a2ec55462","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:46.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/dea056cf-a46f-4532-b461-282a2ec55462 HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: przO3n2Ut01qmOZP81T7tg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Tf%2BFatTUyawnycQzuPhV2lOBbYpXJ99sDqrxWU9%2BFxfizymUQJ8V3KRq%2FDNk7zjaB5Tpsn5bm6rjNZReiWbotnX7CrPYqYfVbftrcTfdZVCl7%2FqIAJzbcFFAugPXudpT0aor6GUL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9e8679acadee-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":860,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":824,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T14:02:37.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKBkde1Xdm%2FhrYEixAjBfzaWoAy4fXTD%2FHgbbfrkkvTVfiBUalRov%2BHldWn80zsEczhkk%2ByE4%2BPODz1BoiTla%2BbdZOd7n3Nd9yil8oU7OLeKng%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d9a9e50c99f11c5-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6330,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1123)","md5":"a7166a6936739434ab48176555a2710b","sha1":"d9d5288542fc2c8669bf197eebf96ff07079b84d","sha256":"8e28da67fd1f1e39b6d98b181b6305466e750529a16cbee1d6a0da14eb4f6691","sha512":"37e0bef4fa39869ebec7168bec3f37035e53c3d9abdec248126f346891dfb214292e2e84a8c9a84bc039154bf91548b88287a3a2b15880a545534e7f518c9001","ssdeep":"192:TFvGXUMUqRGKYCIlCVVeIPZCxf32nfD3bOuB1XieiQfo:9GIlCVQIPZCxv2fS9QA","tlshash":"ecd192b79cb0d90a2393412eeedbf4046a6051d3861a9c50b8cc48ed8fd6fd588d7bb5","first_seen":"2026-02-26T20:33:34.919791Z","last_seen":"2026-03-09T14:59:02.301559Z","times_seen":3,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":244,"dns":208,"connect":8,"send":0,"wait":381,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/platform/disney/favicon.ico?2.2.1769012855833","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:40.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /platform/disney/favicon.ico?2.2.1769012855833 HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:41 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMhRJrD%2BivmcEa%2BGBaNIN5hJVc%2FCUpepwuH0GhhTmnODPMhvnlTvM2%2BZOYpKDi7a9p%2BDM2DUmRDmGeME9rnEDAMEbHTwN3i3mM0OWsffOFhMug%3D%3D\"}]}\r\netag: W/\"69716ee4-25be\"\r\ncontent-encoding: br\r\ncf-ray: 9d9a9e64ed7c0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"959c52d4cf70c5110d1b62e0ffe11d4c","sha1":"97595429a694d4e08505cbd05d142347ef6c1649","sha256":"1d0dc629469d448027ef584f72f7128f977083839928482e76c3f8dc1e6bd930","sha512":"bd35c3899228a680216283e17718cadd505ed7b9888f6b4a0adbad63c65df5cd9db88b4fad0c4c3205fd01a692a35d8da5336d5e218c924d859785f1345cad65","ssdeep":"96:9C9zJGoykHU6zgbBDFuH7efHKgXp83Fzyvyzx:M9zUiUnBDkbe/3XpYzsyz","tlshash":"80120841d3140e8ef07953f4ae93ceba510aad69bca4181a28ffb93ab7333470507425","first_seen":"2025-11-21T07:12:48.14082Z","last_seen":"2026-03-09T14:59:02.315775Z","times_seen":8,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zktdsmnvipbvas.top/platform/disney/config.js?1773064961796","fqdn":"zktdsmnvipbvas.top","domain":"zktdsmnvipbvas.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:41.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zktdsmnvipbvas.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 10:19:06 GMT","end":"Sat, 06 Jun 2026 11:17:47 GMT"},"fingerprint":{"sha1":"87:9C:81:1E:F5:59:2E:5B:10:BD:AC:C8:7E:3E:51:78:97:9C:4B:9F","sha256":"04:DB:50:C9:9A:67:A8:47:A6:71:64:5D:E5:F3:66:3C:28:01:8D:9B:AF:E1:7F:8A:6C:C0:71:DF:1A:9D:75:F6"}}},"request":{"raw":"GET /platform/disney/config.js?1773064961796 HTTP/1.1\r\nHost: zktdsmnvipbvas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 14:02:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 00:27:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 10 Mar 2026 02:02:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SFrfN8DokPB8yC1NkDmw5QopiGjqCZxnQMZ14g%2F2%2Fx2fxpJ6jRZm0FOgoGta6TQQMkOHqc97ZKrhvHHvWToPgNBKLbgZfuXPChF337F2b6oVQ%3D%3D\"}]}\r\netag: W/\"69716ee4-13d\"\r\ncontent-encoding: br\r\ncf-ray: 9d9a9e6b4e0d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"777da2d112bb66e15e6f83d0ac4424fa","sha1":"f38b0f651ea788cd88707a7f25d87fa0b3c6c3dd","sha256":"57ca997c2552c2d558d19562f0fc525bd92a7c105b84b7109d2e4e263f535481","sha512":"c910593312be4cd59998557db05ff7d99e34b4f1e1d2843e5c8d34b791907c19c19157840028731b881bf6c72686d3f8c1657af4cc64c1c8c7ceaf74fe838196","ssdeep":"","tlshash":"7ce0ecfb2ab595497c44422a59cc5a23b251923bdcadb65d789c2d00af9f91c0a78432","first_seen":"2025-11-21T07:12:48.178789Z","last_seen":"2026-04-21T18:06:11.923004Z","times_seen":21,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.disneysa.top/api/common/getAllSetting","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:41.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://zktdsmnvipbvas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 09 Mar 2026 14:02:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6428\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9d9a9e6ca8d29ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":1184,"timings":{"blocked":198,"dns":155,"connect":8,"send":0,"wait":779,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.disneysa.top/api/common/getApprovalAddr","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:42.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"OPTIONS /api/common/getApprovalAddr HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://zktdsmnvipbvas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 09 Mar 2026 14:02:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6428\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9d9a9e6dab5a9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":810,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.disneysa.top/ws/6cdc1520-40bb-45fc-bad2-2a22f3a21db1","fqdn":"h5-api.disneysa.top","domain":"disneysa.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zktdsmnvipbvas.top/","date":"2026-03-09T14:02:43.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"disneysa.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:28:59 GMT","end":"Sat, 02 May 2026 02:26:37 GMT"},"fingerprint":{"sha1":"8A:A7:77:31:DA:86:49:2C:45:0C:83:AA:79:CB:C3:AF:FE:53:5D:5A","sha256":"BF:96:CD:25:86:FB:5C:D3:BA:DC:EE:1F:0F:20:76:C8:1E:AA:03:05:9F:C4:27:47:2A:84:B0:62:00:DF:55:FA"}}},"request":{"raw":"GET /ws/6cdc1520-40bb-45fc-bad2-2a22f3a21db1 HTTP/1.1\r\nHost: h5-api.disneysa.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zktdsmnvipbvas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: A5AJhrVkhv6cTpLM2X4nfg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 09 Mar 2026 14:02:44 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6355\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K4iEP8gXYiUTs8yqhQlepG1F1%2FwKSgEnTzXYuvMzWU1iUwCK2x3qU5m2SrF2%2Bz4JdCDeM9w%2BvtskLwDoUoZNILzwzcHA%2F1PcOe3SPKV3qkMcQhvYDEgqZRzoaTb65uM6I%2BMXdFH4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9d9a9e743a679ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":820,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}