{"report_id":"813e144e-1a4e-473c-aed4-7750c1365ad8","version":6,"status":"done","tags":[],"date":"2026-06-03T10:47:09Z","url":{"schema":"http","addr":"cta-rewards-kaiyun.com","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"title":"开云-kaiyun官网首页-一站式赛事平台","dom":{"size":14607,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"a4582814a8f75f8383ce29fe33d79d71","sha1":"380061086d0d3f6246480d7351723b1f4dc2e8e4","sha256":"4750722c1ba4cb0fb2d0675fbee5450d111b4b171337421c2011262b179736d9","sha512":"3f85768310f55e19a6f7841f962d0be73d6138aab8a4677282c5e0713fe3d3a1b62817e73ac388facf9681602925983a7feef8b8e2e217dc1c486841b09610da","ssdeep":"192:qU4U61BbPRFz8348BkMdY84p4v4XIb+C0+CJRf+POpvCqE7wL9eVVIsV6zUVC9B2:qXJxPUM+POpvi8gv","tlshash":"7f62422259f314271263d0929f296b5b6ee0e517cd4b8a407bed1be95fc7d91cc8320e","dom_hash":"domhash1b7783fc0163bbfbd48a533114736f62","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cta-rewards-kaiyun.com","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":0,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T10:47:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bqyx.jy-hth.com","ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"domain_registered":"2024-04-21","domain_rank":0,"first_seen":"2026-06-03T10:46:12.220334Z","last_seen":"2026-06-03T10:46:12.220335Z","alert_count":0,"request_count":3,"received_data":9077,"sent_data":1301,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cta-rewards-kaiyun.com","ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"domain_registered":"2026-06-01","domain_rank":0,"first_seen":"2026-06-03T10:46:12.218916Z","last_seen":"2026-06-03T10:46:12.218916Z","alert_count":0,"request_count":15,"received_data":974419,"sent_data":7242,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/js/jquery.min.js","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2edc942c0bd2476be8967a9f788d9e26","sha1":"0be05c714a7e6cf28fe692629ece5b3769901dca","sha256":"d482871a5e948cb4884fa0972ea98a81abca057b6bd3f8c995a18c12487e761c","sha512":"d275562b4dd477493aa3cc0392b8bc8f15fdcd0227d3464756e7778aa053c1dd9b185c090d04a11956f7faf5f569d091c50724290ac840c166200ded7d67be32","ssdeep":"1536:pzm2ihKxxpbjBb2gKkGOegmLlGS0bgpiF5tNLRJBOYWEEVvmgWJrJfRjY3p:v6lGS0IWNLFdhtfVKp","tlshash":"a483f9dd73c6b06257bb20b9006f640ff236596a280d8450f125d8eabcb5a4d827bf6d","size":83095,"data":"","first_seen":"2023-03-07T12:03:36Z","last_seen":"2026-06-23T18:07:27.032818Z","times_seen":2782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd8951c1291eead50e2e5d35da0cfd40","sha1":"ac5edfad9ef4ce00c40e4604674b8926129e886f","sha256":"30a96c7d49f7975ae9ad1ebbdaf1c2e60c45f10cdda3152a8dde6baaed523b63","sha512":"946f4d594c88f8828e1995463a5e0b1abc2cffb9441f9f344977830ff9b94ff16abed1b7028a0666c9bdee5a13f12f77233d0528d50921e2858fb3c8e473bdf5","ssdeep":"","tlshash":"3ef0308935b0604b13fb353a55bf10446d3b614bd00a0a51fcbc69e10f5417ca63ba6f","size":569,"data":"","first_seen":"2026-06-03T10:46:17.460404Z","last_seen":"2026-06-04T13:41:50.299226Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/main.js","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5da18e940001e0f476c72033168a57d","sha1":"6fb5ba980aaf7d46774f01f09cc7752c38462957","sha256":"8c0563238485e8085e77ccafaafb31148042e039adf62bdb4856944429805a49","sha512":"5dc7e5ebd54a234fc10779ab7007a56da8698c7696de3b6172839c5cd201607361f82c9873552ab540597e07a8e0745b6ca19a3dc867f6fd7c5180cdfa30b5a4","ssdeep":"","tlshash":"d011dad8e7e9e15b7fcc4d97ee09af8501b2c57ba0d1b2438368f94c015d152c65d444","size":1024,"data":"","first_seen":"2026-06-03T10:46:17.44597Z","last_seen":"2026-06-04T13:41:50.295268Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/code.js?0.6762410413769975","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bf5f5a0322e9f37dac16d207da4d776","sha1":"d868af7d5259851f22ab24a2e0d0ee4811bbe02b","sha256":"2aca3b69c15bca809d109fd16b697c297d2ce51ae3feeaaf35c970152a85d6ad","sha512":"5bddab13997bf54f83f37898c8e817fa86d2471338652dc6194be0b53272f2a23250747e14c71b26ceff59c06d6b202cd654e25af54ead680a1ac2d93c9185d0","ssdeep":"96:+NPT4xN/YO/z3iX0iMDfXAyzWvaxkRuW24b:+BT4xN/YO/z3iX0iMDXAAoRuW24b","tlshash":"3fc1f658a5d52e11c8af65a48f8f210560beb673ec0acd15be0ddbd05f70b3b900b59d","size":5718,"data":"","first_seen":"2026-06-03T10:46:17.457887Z","last_seen":"2026-06-04T13:41:50.298569Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/link.js?0.6026665041049278","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60122809b7b6c4298880caf4e0893c4e","sha1":"be0ae782c9be28bdf5c6360574e02499eb8ec0d8","sha256":"6d2aa75f3bc8e3043cf96fb846f6ff435093e4217e1875baaffd5c0cff7ba2b5","sha512":"721bef773db71e613c7e68b27167ef5cdd0f32e1dd3669df1723e06dac2a050a632bc09d2e2f18c1c50bdda478a14b352ddb160f3fabb06e470751a55d175f18","ssdeep":"","tlshash":"b80188efc0d4dd570b8592d4e839661ca2db424fdcbd2096df1606700b660bb6d2f1ae","size":759,"data":"","first_seen":"2026-06-03T10:46:17.459173Z","last_seen":"2026-06-03T10:47:10.973495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"ef8dbdcc44bd0e040e7808852f1b76f7","sha1":"14f726a62406c88668a1ba71e4dc1f6f38919dfe","sha256":"4c69b61724dbc369bee62d5c3620afb8f296b8d75c6c8abf1375ef3809a12205","sha512":"84b4399a48e7f71777882a942799743e5b494329fa8ad2db34be89450cda7ed97eb234438817542868cf048d8d9ed004deefbeec2ba180a29893753d6738999c","ssdeep":"","tlshash":"92b092a31c4a8904808086c8c4bee909806898aac241cd90a9e312e0794dbea1a0ca69","size":116,"data":"","first_seen":"2026-06-03T10:47:10.977057Z","last_seen":"2026-06-03T10:47:10.977057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3ba86f23cd7ef6e8464acee2c376c729","sha1":"12aac27fb4188fa2af61f5f3d096235efd8d1353","sha256":"a9b63f93bd2f5339e02acf7ade000bcf3042f986ec712174f82383857585aa19","sha512":"35ecb2fe64eb48376ade0289492369f3a102e509e5789056266eace57d537f0e5ba10f9100b89aac62819a6457d1f22e459083f8b9997f65c0e393ea838e4859","ssdeep":"","tlshash":"71b092631e4688458040c6c8d1eee51e90a5d69ac940cc96e8ea22a13968aea1a49698","size":116,"data":"","first_seen":"2026-06-03T10:47:10.977948Z","last_seen":"2026-06-03T10:47:10.977948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/ag-66.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/ag-66.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-34e3e\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 564, 8-bit/color RGBA, non-interlaced","md5":"ccac73c61548278834287a1456474a87","sha1":"b37119912693160e6afb68aaf30f355a15f1bc99","sha256":"f19fe2c491dfcc9eef6aad394eea674b3f51041e12c956d1df8b6aa1e5fa5187","sha512":"41cc1378a5196305d3e7317c3067131a01756244171ada6e86c273c9df76dfe5f0d99a1f8b9dd1501ec05fc0788e0da46b12e87448c905ee2f717d8c53ec5efa","ssdeep":"3072:rBx+IE60kHUy3LpDooHe2bmU3AOtOFMxofhkHALKIwfTFrMj6J4CuUst87U:1x+V2LpdgOZs8ofhMKKIYM58o","tlshash":"382413efd84f856e621b211d90422c75ef1528d8a56111bab4fc3222de866e5bf6032e","first_seen":"2023-11-12T07:36:06Z","last_seen":"2026-06-19T02:18:29.090512Z","times_seen":224,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T10:46:45.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16104,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1644)","md5":"ede5dafb735b615047cc333e1ae5d1c7","sha1":"947df9cca24ed85f59b346b27052e722ab753645","sha256":"0afe3fc884d67efb0a49cc5db75151639be4cbcc037b8250b7ffe3490626db35","sha512":"e7ca3906237bd6577bbd07ce9cbe3de3f4f5d5cddf70432157e27613c1474d0a99d04e62bb6c941af632333f777080a65cedc44d96bb94e06e7623de5fbc5e4d","ssdeep":"192:T/2x3BWVWkSzcVbz8348BkMdY84p4v4XIb+C0+CJy+POpvCqE7wL9eVVIsV6zUVp:rWpX+POpvi8KUM","tlshash":"f272631794f230e722a390915b7a671b2ed2e517c9479a0176bc0be95fcbce0dc8325e","first_seen":"2026-06-03T10:46:17.45631Z","last_seen":"2026-06-03T10:47:10.965632Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1361,"timings":{"blocked":542,"dns":0,"connect":265,"send":0,"wait":277,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/js/jquery.min.js","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/js/jquery.min.js HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-14497\"\r\nexpires: Wed, 03 Jun 2026 22:46:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32110)","md5":"2edc942c0bd2476be8967a9f788d9e26","sha1":"0be05c714a7e6cf28fe692629ece5b3769901dca","sha256":"d482871a5e948cb4884fa0972ea98a81abca057b6bd3f8c995a18c12487e761c","sha512":"d275562b4dd477493aa3cc0392b8bc8f15fdcd0227d3464756e7778aa053c1dd9b185c090d04a11956f7faf5f569d091c50724290ac840c166200ded7d67be32","ssdeep":"1536:pzm2ihKxxpbjBb2gKkGOegmLlGS0bgpiF5tNLRJBOYWEEVvmgWJrJfRjY3p:v6lGS0IWNLFdhtfVKp","tlshash":"a483f9dd73c6b06257bb20b9006f640ff236596a280d8450f125d8eabcb5a4d827bf6d","first_seen":"2023-03-07T12:03:36Z","last_seen":"2026-06-23T18:07:27.032818Z","times_seen":2782,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/picture/rbsmgwmig0oaqpqmaabq2kzlptk31.webp","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/picture/rbsmgwmig0oaqpqmaabq2kzlptk31.webp HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18810\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\netag: \"6870c156-497a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdb0153d8cc3dbec5e43d569a03ab2c4","sha1":"0a7c9c3952a48a331a76089f57db3e1b618b0821","sha256":"11d707bf46d3e44e7057580208377df9b8839b00403b94495d3a9f85db23842c","sha512":"159222b548ccfbacd31fd37e9b52bdde0ff662f6b2f21b06c51a0e97022d7d8200b15ca365fb96b9063c76853ec883ebd3caf571816016639e0f953e7541238a","ssdeep":"384:a/5XGHoNGqbcToc+gL5KqF94ombm0PgVT5nlDGXIgVC28hJSb/:oXGHqPQTj+gF7oPgVTYIgU28ha/","tlshash":"9882e11861446beec0430d68fce676fbcaa059cf3a60d5251eb637237b72260abf9055","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-06-24T00:05:09.14691Z","times_seen":3368,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/code.js?0.6762410413769975","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jy-hth.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 21 May 2025 10:16:09 GMT","end":"Sat, 20 Jun 2026 10:16:08 GMT"},"fingerprint":{"sha1":"E7:5D:7E:E1:31:E3:80:50:B7:5E:C7:FA:9B:88:F9:0A:AF:70:06:70","sha256":"CD:9F:1E:CF:7C:33:A6:42:03:25:F6:F3:95:4A:86:BC:CA:DA:05:B9:3F:A4:94:09:E6:1C:8E:22:72:81:FC:CA"}}},"request":{"raw":"GET /js/code.js?0.6762410413769975 HTTP/1.1\r\nHost: bqyx.jy-hth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 11:12:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1974a9-1656\"\r\nexpires: Wed, 03 Jun 2026 22:46:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5718,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0bf5f5a0322e9f37dac16d207da4d776","sha1":"d868af7d5259851f22ab24a2e0d0ee4811bbe02b","sha256":"2aca3b69c15bca809d109fd16b697c297d2ce51ae3feeaaf35c970152a85d6ad","sha512":"5bddab13997bf54f83f37898c8e817fa86d2471338652dc6194be0b53272f2a23250747e14c71b26ceff59c06d6b202cd654e25af54ead680a1ac2d93c9185d0","ssdeep":"96:+NPT4xN/YO/z3iX0iMDfXAyzWvaxkRuW24b:+BT4xN/YO/z3iX0iMDXAAoRuW24b","tlshash":"3fc1f658a5d52e11c8af65a48f8f210560beb673ec0acd15be0ddbd05f70b3b900b59d","first_seen":"2026-06-03T10:46:17.457887Z","last_seen":"2026-06-04T13:41:50.298569Z","times_seen":6,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/background.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/background.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-2c6df\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1030, 8-bit colormap, non-interlaced","md5":"05bf65d40291d266c59f26f96e67cc72","sha1":"a82f0c303aa0db6e99b37cd73853d7a6810c3e47","sha256":"1a977499b07e4c440c3b1c4284f83140194739f0308cd5090f5f7157a1cd34f3","sha512":"782b2c8345334a55ab399e0767618b74a2bad35835953181831197ce640e4016c6d829f7b5ec02ef2ebb90c91a4aed08ef611ce0b69396874f6b8fe91528ff8d","ssdeep":"3072:yH+fSTQYIsZeo40OdAbcP5CSxRg5rKI/vSk+sD1WDHMfwNNo4rDR:8+aQY1ZI95CSxK57Sk+vIfwk4rDR","tlshash":"4c0412aa6cb708f3c5844cacb0b4add476ebebac05dc7ccef691089d9953c190e84756","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-06-24T00:05:09.147586Z","times_seen":3337,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/sport-item-bg.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/sport-item-bg.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-3092\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 624 x 400, 2-bit colormap, non-interlaced","md5":"ac76c6c7dd993b8bba750449be70d3ea","sha1":"2c1111bcdfa2b3549c8e440c472b866553a270d8","sha256":"b909239d687e0c2dea7608a984bd4a8ad8fe589ec72079a9305f836971c9667c","sha512":"39a33c45472eb07f3d7bd89c60e91a13ad15d94ab4a965b3ff5bdc836383b7bbb5a1a3e03ffcddd14e600583f1f38adb8066347e14f88c51dcab40a8bf0de6cf","ssdeep":"192:YYjq+N9vUOkM3NQeisvtvRdy1/VsBlArzT89SaSkqxUSriFlKtq9RcIyMMwEGI6V:Y2N9vUPpeDvn8WoX8saqxULlb9gMMwVV","tlshash":"d042c0abffcb072865968497030f71a0ea0915ee98298bcd164c7b7b161c054b16caee","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-06-24T00:05:09.16552Z","times_seen":3805,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/picture/rbsmgwmigyqad1n-aaa_2muwpem57.webp","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/picture/rbsmgwmigyqad1n-aaa_2muwpem57.webp HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15892\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\netag: \"6870c156-3e14\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08cd6d95c1b9dd5ddd5b88210990bb1e","sha1":"2efd19c9af93721539334da7f985a93c08d87429","sha256":"d21e7979c7530e83d7f7f91cd530baba0f7ee359e0aa19587f7f6971fbde35f8","sha512":"95a0747b1e7385dd003a7f7ec708882925c6681f57607fe549ccae33dcdda93d1f0362f0906f98cf50a98d967aa04c1447f62d5741913c1343192f90e5ca017f","ssdeep":"384:hvzbZ1UtYve/2guPjJHVie4TgGUicWMfTkofqYvf1lQ:h3ktd2guPjmP9cRfTkS3vffQ","tlshash":"8d62c0ac3efe5a5d0eab6519433c0b824844d8fb6a41353c434ff8384a4d19565b372b","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-06-06T23:41:24.928041Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/picture/rbsmgwmigzeaqeisaabdvano3pe24.webp","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/picture/rbsmgwmigzeaqeisaabdvano3pe24.webp HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17340\r\nlast-modified: Fri, 29 May 2026 09:20:20 GMT\r\netag: \"6a195a54-43bc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f749c87131ab9ccbd83382170de16d95","sha1":"6339bb73611eea417b5bf8ee8ec6b0e6f0e1db33","sha256":"ccb2e754305480823dee83b7b7983e9eb5f8cc297809c2cb1e664943ac910cfe","sha512":"069d669a7f35fe818ec88f672d5f83d4909cfe0c5347c88fe0f6fc2ba8d84c75f6568a1a6a754fe3c9b0f67610477adf9c51979ba18758d2aed0e3019f66c3e1","ssdeep":"384:PJx7sSkYRc46pafmsP7/4E5CUUlFnvnrhELo5sD+jT1BmG:PD7sSk4/6pQmsP7/4E0HhvlNRH","tlshash":"8472c0d781303ba773e295505454d2e1026b7cc5e106b177f9638b63f26f9953bf9028","first_seen":"2023-05-18T07:54:03Z","last_seen":"2026-06-20T06:31:12.121999Z","times_seen":420,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/jiuyou.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/jiuyou.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-1bc0\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 104, 8-bit/color RGBA, non-interlaced","md5":"65565d3d8ed633cdffcef60f31a3739f","sha1":"5cd57c24b4aff4706ab5ce940301d42866021833","sha256":"70133612a54e7774564b6fea940c96c5b6414c6e2556d36c04d8e077368e273f","sha512":"4cac8ef85a137f4088d8a8dba63307edcf86f9ab6340a11fab0a0e82dfefac20ef6b3cf9bc2b1f9ecf1ec535bd6ef680d65f67a0b167981b68618de73d3c2334","ssdeep":"192:eS8ALjMVSXOxHFkl04u27DNoMmhz8xMe4:B8ALIVSXglky4r7Zo1AMZ","tlshash":"b5e17ca211f0a2f66a8ab4be94d676630323d3ac10378d2d7b13c8caf21867553564b7","first_seen":"2024-12-12T06:25:02.48951Z","last_seen":"2026-06-04T13:41:50.290685Z","times_seen":34,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/mklogo.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/mklogo.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 04 Feb 2026 05:37:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6982db0e-394cb\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"5e09946c236bcc5e7bd9a751f6c99e96","sha1":"f7306601d389ac798cfa039ec60c33e28c6f6b8e","sha256":"2605565236f74711d1e1d6add9cc065afcacc90240b9fbaec79a910fad94a770","sha512":"5b6e555e6606f9326408d31f683f0d6b993c7295db5103cd57d184a0b61ad2796509562268340c5262130701b5003246e0a79a9d16a35c8fa85f3ad93e04030b","ssdeep":"6144:1J8qXgpv2RRLr9126C9JG6oOuxqX41bKFC9Ke9eceLIaAdVrj:159r91JCT4OuAo1mFC0e9UIjDH","tlshash":"7f3412a63156841ef629617fd023c35be463c2f9f7b879bb216d81c7794107b02a36e8","first_seen":"2025-12-19T00:49:12.466141Z","last_seen":"2026-06-08T21:15:14.925585Z","times_seen":17,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/ico/favicon348.ico","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:48.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/ico/favicon348.ico HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16958\r\nlast-modified: Thu, 24 Jul 2025 13:35:28 GMT\r\netag: \"688236a0-423e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"f4a2ce6b111e94e87f6dc67aed0ce09a","sha1":"9fc07a3f823c59196e02892f827d11f7b8c40cfd","sha256":"f8e578e6610ca9ded6288d2214b5b7279df3b299ecf36267e938f894dbc91cd0","sha512":"c5f432c4f171dbfad8b1330d711381606913e4bbaabf317824d46d4705230faf589fc65b848ae20d4da80f035a9c0929f108174ac765bf983134e6ff34f99bf8","ssdeep":"96:0AznjO//ByzgW9kOoF/boNByQC8ozooaW6d4j+Mo49R6odIP4U2+w8GCyGIVRuTh:VzugzNkqwh2/Mb2BkBvuTV9Q2m/0X3xP","tlshash":"a0720d37e8a28c01d844c37fa5c0be15101f06a2bd50a959e58e7ef73b63b6e5670d70","first_seen":"2026-06-03T10:46:17.455095Z","last_seen":"2026-06-03T10:47:10.972387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/picture/rbsmgwmmnw-ahnf9aabt7ce2zgq87.webp","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/picture/rbsmgwmmnw-ahnf9aabt7ce2zgq87.webp HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21484\r\nlast-modified: Fri, 29 May 2026 09:20:20 GMT\r\netag: \"6a195a54-53ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccf323bf4e1c41b61aaa296ea59b8b81","sha1":"83f1f27a2fc6c58c751b5e7fc627015a1991b374","sha256":"c7959283d90c9940056378a35789761735a565490945094cd5b77c6b4bf1cc74","sha512":"e75e1bfd61482f56c07ebaa6591f3bee348cc1badbec88a9cfffe930cc5da68a8ccb80271a324fda8d0563b9ccdd4c966a14e4435caa9b9da3fbe1679a6a6e8d","ssdeep":"384:ioDvU5aozxCzakUC75bUncSMiubtHuyO9+2lm/3t0mn/gK0QqbLDng7v:1o4LaagncSzEtH4+DF0mYZfUv","tlshash":"b1a2e1f798af70b3532a495c93f695ee5b84ab340c8dac43e879986ca3352734831e05","first_seen":"2023-05-18T07:54:03Z","last_seen":"2026-06-24T00:05:09.162362Z","times_seen":3186,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/link.js?0.6026665041049278","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jy-hth.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 21 May 2025 10:16:09 GMT","end":"Sat, 20 Jun 2026 10:16:08 GMT"},"fingerprint":{"sha1":"E7:5D:7E:E1:31:E3:80:50:B7:5E:C7:FA:9B:88:F9:0A:AF:70:06:70","sha256":"CD:9F:1E:CF:7C:33:A6:42:03:25:F6:F3:95:4A:86:BC:CA:DA:05:B9:3F:A4:94:09:E6:1C:8E:22:72:81:FC:CA"}}},"request":{"raw":"GET /js/link.js?0.6026665041049278 HTTP/1.1\r\nHost: bqyx.jy-hth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 759\r\nlast-modified: Wed, 03 Jun 2026 10:06:57 GMT\r\netag: \"6a1ffcc1-2f7\"\r\nexpires: Wed, 03 Jun 2026 22:46:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":759,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"60122809b7b6c4298880caf4e0893c4e","sha1":"be0ae782c9be28bdf5c6360574e02499eb8ec0d8","sha256":"6d2aa75f3bc8e3043cf96fb846f6ff435093e4217e1875baaffd5c0cff7ba2b5","sha512":"721bef773db71e613c7e68b27167ef5cdd0f32e1dd3669df1723e06dac2a050a632bc09d2e2f18c1c50bdda478a14b352ddb160f3fabb06e470751a55d175f18","ssdeep":"","tlshash":"b80188efc0d4dd570b8592d4e839661ca2db424fdcbd2096df1606700b660bb6d2f1ae","first_seen":"2026-06-03T10:46:17.459173Z","last_seen":"2026-06-03T10:47:10.973495Z","times_seen":2,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/kaiyunlogo.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/kaiyunlogo.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-3ace\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 814 x 200, 8-bit colormap, non-interlaced","md5":"5bdb83ec9f353d69c2ebc9c36cef090e","sha1":"e3a542a5b41ab05a8a444c3f106186806d1f025e","sha256":"fc148ba9a62f11da475123e65ced85cb59d9715e2c202655e4322942803bde0e","sha512":"465c1eb28d8641c930c163efdafb203a10dd280eb47d5fdc121459bc243309ee18c8fd5f1162bc39402ee416d6ad4034a83253195d5961633a23620a6dfcc261","ssdeep":"192:JpKA2giu6cjK+61eWj17lwRm+M2HtS7NGO+bgJvlClT+ehacY7qZFimlLKztvuBJ:Xk+6Jx7lwRmCpOPJ4T1oulZwtHa","tlshash":"1e62d1c3420996a3fe3624fc31850bada934fcbe5411f725d621758fc9f4aa34c9191e","first_seen":"2023-09-17T16:12:24Z","last_seen":"2026-06-24T00:05:09.166023Z","times_seen":3156,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/images/hthlogo.png","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:47.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/images/hthlogo.png HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/skin/static/css/ky.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Jul 2025 07:46:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6870c156-1a28\"\r\nexpires: Fri, 03 Jul 2026 10:46:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 86, 8-bit colormap, non-interlaced","md5":"f9038799f684a3fe4635f8ffa6cb0e05","sha1":"e13a9c966a7e0a8165c306d0309268d917076e65","sha256":"c10e575138e2d70a4e1afb59b668d89b9824a7e8fa272afd11f1692e9bd6530d","sha512":"0e89c7ba019600399d19c51d4ebdda11a32c7338b64281904a82a00ec480b9a2f32f53e4dfbba13f72d357fb8f078f24f5dbd1c132a2e1728df44ef29684c54b","ssdeep":"192:7lZ9mR0Cs4QeE986T1pwqxACpWKL8+Bldc/yFWxkq71W+4Gz:RGFSeE9FTUqxaM2ysGqZW+4Gz","tlshash":"6fd18ef756b6685b4e2823085604b9e44c48a107f2f874b6c837569bae50a73a1ae463","first_seen":"2024-04-06T21:30:48Z","last_seen":"2026-06-24T00:05:09.157218Z","times_seen":3288,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bqyx.jy-hth.com/js/main.js","fqdn":"bqyx.jy-hth.com","domain":"jy-hth.com","tld":"com"},"ip":{"addr":"107.151.72.162","port":443,"asn":132839,"as":"POWER LINE DATACENTER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jy-hth.com","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Wed, 21 May 2025 10:16:09 GMT","end":"Sat, 20 Jun 2026 10:16:08 GMT"},"fingerprint":{"sha1":"E7:5D:7E:E1:31:E3:80:50:B7:5E:C7:FA:9B:88:F9:0A:AF:70:06:70","sha256":"CD:9F:1E:CF:7C:33:A6:42:03:25:F6:F3:95:4A:86:BC:CA:DA:05:B9:3F:A4:94:09:E6:1C:8E:22:72:81:FC:CA"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: bqyx.jy-hth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 27 Apr 2024 09:13:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"662cc1ae-400\"\r\nexpires: Wed, 03 Jun 2026 22:46:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1024), with no line terminators","md5":"e5da18e940001e0f476c72033168a57d","sha1":"6fb5ba980aaf7d46774f01f09cc7752c38462957","sha256":"8c0563238485e8085e77ccafaafb31148042e039adf62bdb4856944429805a49","sha512":"5dc7e5ebd54a234fc10779ab7007a56da8698c7696de3b6172839c5cd201607361f82c9873552ab540597e07a8e0745b6ca19a3dc867f6fd7c5180cdfa30b5a4","ssdeep":"","tlshash":"d011dad8e7e9e15b7fcc4d97ee09af8501b2c57ba0d1b2438368f94c015d152c65d444","first_seen":"2026-06-03T10:46:17.44597Z","last_seen":"2026-06-04T13:41:50.295268Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1385,"timings":{"blocked":558,"dns":1,"connect":261,"send":0,"wait":262,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cta-rewards-kaiyun.com/skin/static/css/ky.css","fqdn":"cta-rewards-kaiyun.com","domain":"cta-rewards-kaiyun.com","tld":"com"},"ip":{"addr":"186.240.80.61","port":443,"asn":7738,"as":"V tal","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cta-rewards-kaiyun.com/","date":"2026-06-03T10:46:46.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lzp-guide-kaiyun.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Jun 2026 10:41:20 GMT","end":"Sun, 30 Aug 2026 10:41:19 GMT"},"fingerprint":{"sha1":"FE:AD:D8:26:5E:F6:F6:8B:20:47:2A:08:8D:2C:5A:4E:23:2F:61:63","sha256":"E4:4F:F7:F3:80:8D:F4:AA:33:62:35:BD:29:B9:BE:EC:1B:1C:A1:A3:7D:C8:7C:95:36:0D:11:15:58:CB:E8:5D"}}},"request":{"raw":"GET /skin/static/css/ky.css HTTP/1.1\r\nHost: cta-rewards-kaiyun.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cta-rewards-kaiyun.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 10:46:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 May 2026 09:19:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a195a24-19ba5\"\r\nexpires: Wed, 03 Jun 2026 22:46:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20941)","md5":"4a4c3719cbfc2250d3c3a9126c786195","sha1":"22c472f570cf9cef510a4ac228ff4c63c0d725a0","sha256":"138af9a35ed633e3478b7e4c2a6754f56733894d0b947ddb3088233f646e1712","sha512":"d33d22aaf0bc7fe6919bc20860975843d662cbb9ff4e27d6b06d1cabe29e172eed617b72922206c1392ff4851c6e519149054ca858b45364c6cf1ff3eae8900c","ssdeep":"1536:/RChN3HzpMbcZsGvVHlaLE4STizU0X4qrriMnWf9CA:Za3MbcZbfaLE38pS7cA","tlshash":"5ca36c655af33816b01b8e7f33ef3319393880435506fd587bec2a8caf8527546a1b89","first_seen":"2026-06-03T10:46:17.447203Z","last_seen":"2026-06-04T13:41:50.292058Z","times_seen":6,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}