{"report_id":"854caae1-f9b6-4043-aa11-db911220e06c","version":6,"status":"done","tags":[],"date":"2026-02-03T08:54:04Z","url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.168.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"title":"虚拟货币投资平台","dom":{"size":448849,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19356)","md5":"256cf285885a6648a97411ba28268942","sha1":"f9dde8a84f07cf582a7e1b7abdf0e3cb32e335eb","sha256":"d65aa3f1a7ed1b1fb1dd47ba3fc388f70d5fb040e3b93357cb3cda8b9c9b172a","sha512":"472bd3fe8e45c338477a45f9c3cf46d447ef530abf678bce319ed470e6d763ab741d20697d58c885dbd23ffd74a0b9cd215217ec9b089a351786bf13f26f3583","ssdeep":"6144:pe/+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrtNNdsMeqdZlgH:pArnxPOvyJZYL8","tlshash":"32a47c64326d103d6eb306e1e4af7606b1383163f40bc861fa1ce4a51be59d63467fae","dom_hash":"domhashfa8cd3098ba19a051b5edddc4ad83a7a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.168.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T08:54:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"plausible.io","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-12-30","domain_rank":8565,"first_seen":"2019-02-01T08:53:03Z","last_seen":"2026-02-02T07:48:18.631117Z","alert_count":0,"request_count":3,"received_data":7428,"sent_data":1438,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"usdt.6-i.cc","ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-02-03T08:53:48.882734Z","last_seen":"2026-02-03T08:53:48.882734Z","alert_count":0,"request_count":5,"received_data":1491305,"sent_data":2387,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"manus-analytics.com","ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-19T13:04:57.49856Z","last_seen":"2026-01-29T23:25:04.627356Z","alert_count":0,"request_count":3,"received_data":6134,"sent_data":1424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files.manuscdn.com","ip":{"addr":"3.164.240.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":1414307,"first_seen":"2025-03-12T08:00:03.578177Z","last_seen":"2026-02-01T16:40:31.40937Z","alert_count":0,"request_count":1,"received_data":736190,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.manus.im","ip":{"addr":"52.4.64.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":485297,"first_seen":"2025-03-12T08:00:03.587143Z","last_seen":"2026-02-01T20:39:40.648022Z","alert_count":0,"request_count":1,"received_data":196,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","size":5216,"data":"","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-07-19T03:33:28.665953Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04922dc466f5064568485143fa28245a","sha1":"014a2847682b000a8278fe7384c469d5bb814969","sha256":"1288fa5ce0e4145f3b05569b68ac77f24afbb02d030a0bf497437709db138daf","sha512":"932250bd757f0d63f48245f2ce2b22c8cb692eb9556918e15cc331b4d6971744d34beca7b6b97c601fe41242aea40fd0a61a86117efce91f0c474fd19fdba142","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:DrnxPOvyJZYLM","tlshash":"aa748e98327925796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","size":366792,"data":"","first_seen":"2025-12-17T21:55:23.967437Z","last_seen":"2026-06-07T03:56:12.242412Z","times_seen":595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/assets/index-BcW8r_M5.js","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b40bfdc5bfde6599b55b588a8d98f8","sha1":"e5fd326f2cce4f744610b73ed2add72c7c78737d","sha256":"b022ddadf763ad2c2be365b60ddf1bdcdc68a514fab7443108a2499869b33d03","sha512":"dd414243173ca0749d048d81ad0cad92661796468be452474f2ca8d6b5ce73286ed1f0bb99ed9fb091fa1b53c4844c6deb1677a3a2a06d4e268ba3bf4beb952a","ssdeep":"6144:EZ6DwoLJW8tKXdD2fjSCRu+fdnteH6Vt0RAE3ysP5c178U/J5XcULQno+K:PW96OsuIcKt0RAEisP5c1rKQ","tlshash":"5cd45c887188756e5fb31ad0943f840570382a35b00e4421f95cf9685ee46da7abbfef","size":603312,"data":"","first_seen":"2026-02-03T08:53:53.699549Z","last_seen":"2026-02-03T08:54:07.446312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","size":735643,"data":"","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-07-19T09:39:33.009306Z","times_seen":311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03e0956763e6fccbc7d5a8eec292ad52","sha1":"725267abf80cd928ca48b98ddabd9a410c7103e3","sha256":"92ee832ca3953b39f90eee3494844f55568148c07624d29e635fb61162bb9956","sha512":"ef47aca8150e87bedf002a9da1aa2a5ab46176f8c8388b2733791431ddd97609c7e779dd4b1a78a3db32e721e4280b95ef5f09a8cb758c963783679023c3acf7","ssdeep":"","tlshash":"02e061d3c35c81ed41a4814458de34c8fd0ec8463d5ad932dc70990144da032d151174","size":385,"data":"","first_seen":"2026-02-03T08:53:53.712296Z","last_seen":"2026-02-03T08:54:07.46134Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-07-25T17:18:25.054015Z","times_seen":694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97247d1a8e9d91cafde0cce7c823b382","sha1":"a7a54c71957545771fd45025084f406c152778c3","sha256":"0291902ff79f5d72058f0ecf27a6261b3c5e757cb12b4f5fe8874e24deefb30d","sha512":"0e0af62f9247d36eb5f13ee0d56997e5404410c896a407cf26c1091fa60cc0d871104162287c132bbd6c53b27cedbba3871d9f46fece018f5060d7635a8db868","ssdeep":"","tlshash":"e0d0a9e4a38cb32d12bc30848b2f334b702e042a19442a933905d257b428f8f8b34ef8","size":241,"data":"","first_seen":"2025-06-01T08:22:11.798063Z","last_seen":"2026-06-01T18:37:29.561286Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.6-i.cc/\r\nContent-Type: text/plain\r\nContent-Length: 119\r\nOrigin: https://usdt.6-i.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":119,"data":"{\"n\":\"custom-pageview\",\"v\":33,\"u\":\"https://usdt.6-i.cc/\",\"d\":\"manus.space\",\"r\":null,\"p\":{\"domain\":\"usdt.6-i.cc\"},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJCwmJQRw-2Mq4FSOt-J\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/03/2026 08:53:42\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: 9abe203ddc156e20b9d5317c725abf9d\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-27T00:52:23.401445Z","times_seen":442537,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/favicon.svg","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:43.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.6-i.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:16:50 GMT","end":"Fri, 01 May 2026 17:16:45 GMT"},"fingerprint":{"sha1":"31:40:3A:70:9A:A4:50:D9:47:15:68:1F:A3:5B:2B:AF:AE:0C:7A:8C","sha256":"FE:9D:1B:31:EF:08:36:80:85:85:27:A2:F1:06:EA:E2:56:E7:1C:31:93:29:DF:6E:6E:A5:BD:F1:3D:25:7B:78"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: usdt.6-i.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:43 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c80b310d94a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371680,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34183)","md5":"1db5714cf4342b65f01e0bf4b83220c0","sha1":"d9b2bc862330719bbbe80ec4f0db3db9d2971d65","sha256":"e6433d1c2016e0b8c68272e045230e9b606b719817d078f261cfc583f320e4b0","sha512":"ae0f84c27e556561da61bbed0ed65db844d57147d26e7c183c050f76a80e2d0e1494d927d4bc105890ca2c7c9d2f9b616e717a8dda8393594d3f7f2b971b92e7","ssdeep":"6144:N+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrte:FrnxPOvyJZYLG","tlshash":"92848e98327915796ea302e6a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-03T08:53:53.702304Z","last_seen":"2026-02-03T08:54:07.444284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":774,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":774,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/assets/index-BcW8r_M5.js","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.6-i.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:16:50 GMT","end":"Fri, 01 May 2026 17:16:45 GMT"},"fingerprint":{"sha1":"31:40:3A:70:9A:A4:50:D9:47:15:68:1F:A3:5B:2B:AF:AE:0C:7A:8C","sha256":"FE:9D:1B:31:EF:08:36:80:85:85:27:A2:F1:06:EA:E2:56:E7:1C:31:93:29:DF:6E:6E:A5:BD:F1:3D:25:7B:78"}}},"request":{"raw":"GET /assets/index-BcW8r_M5.js HTTP/1.1\r\nHost: usdt.6-i.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c80b30baa1a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":603312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36023)","md5":"c9b40bfdc5bfde6599b55b588a8d98f8","sha1":"e5fd326f2cce4f744610b73ed2add72c7c78737d","sha256":"b022ddadf763ad2c2be365b60ddf1bdcdc68a514fab7443108a2499869b33d03","sha512":"dd414243173ca0749d048d81ad0cad92661796468be452474f2ca8d6b5ce73286ed1f0bb99ed9fb091fa1b53c4844c6deb1677a3a2a06d4e268ba3bf4beb952a","ssdeep":"6144:EZ6DwoLJW8tKXdD2fjSCRu+fdnteH6Vt0RAE3ysP5c178U/J5XcULQno+K:PW96OsuIcKt0RAEisP5c1rKQ","tlshash":"5cd45c887188756e5fb31ad0943f840570382a35b00e4421f95cf9685ee46da7abbfef","first_seen":"2026-02-03T08:53:53.699549Z","last_seen":"2026-02-03T08:54:07.446312Z","times_seen":2,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, must-revalidate, max-age=86400\r\ncontent-encoding: br\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: interest-cohort=()\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/02/2026 19:48:25\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: aa17372eae6a9e76a40758f31a273790\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5216), with no line terminators","md5":"7d0e4602544fdb71b94f53d0873d8423","sha1":"fb0a9cd646aebf2e832eb80fe614ee4a968989f5","sha256":"d2286efb6fd1cb9d37111479f5a1cb0acc47f303e5046aeaac4a0418708a4f9b","sha512":"f371d4d2a9329f89a45969e142308f8aa7fd61c6b8761c0ebc49355a1185b7db470fc213ee8ade881b448415f9cbad3e087495be7531414598e55116c44e04d9","ssdeep":"96:oHD50uAtq/vnfesDDrpLG09bT2WA+8LjlWny66gEhBV:AD5jf1DDrpLf9X2WP8LjlWnF6gKV","tlshash":"94b1a3edb64271b555fa9126ba6fb3027a3b2462340e5400682ddcc13d28eaf9377d8d","first_seen":"2025-10-29T17:07:00.589946Z","last_seen":"2026-07-19T03:33:28.665953Z","times_seen":434,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":3,"connect":6,"send":0,"wait":5,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plausible.io/api/event","fqdn":"plausible.io","domain":"plausible.io","tld":"io"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plausible.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 22:02:50 GMT","end":"Sat, 02 May 2026 22:02:49 GMT"},"fingerprint":{"sha1":"BA:29:7D:2E:63:CA:0C:B0:75:05:28:2C:AC:19:B8:54:3D:2D:5F:83","sha256":"20:1A:42:10:AC:43:B1:3B:61:73:BF:90:65:1C:B7:F7:BA:EE:1E:AC:14:8F:C2:BD:62:39:01:BB:4B:95:EA:2E"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: plausible.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.6-i.cc/\r\nContent-Type: text/plain\r\nContent-Length: 90\r\nOrigin: https://usdt.6-i.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":90,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://usdt.6-i.cc/\",\"d\":\"manus.space\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 682664\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncache-control: must-revalidate, max-age=0, private\r\nvia: 1.1 Caddy\r\napplication: 127.0.0.1\r\npermissions-policy: interest-cohort=()\r\nx-plausible-dropped: 1\r\nx-request-id: GJCwmJQT5n7txjlCAo8P\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 202\r\ncdn-cachedat: 02/03/2026 08:53:42\r\ncdn-edgestorageid: 830\r\naccept-ch: Sec-CH-UA-Platform, Sec-CH-UA\r\ncdn-requestid: a76fe16ef866e84f4c470a4be9c10fc5\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-27T00:52:23.401445Z","times_seen":442537,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":34,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:43.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 16:05:36 GMT","end":"Sat, 07 Mar 2026 17:04:08 GMT"},"fingerprint":{"sha1":"D8:8C:C5:54:BE:AE:D3:9F:8E:B6:13:D7:83:D6:F0:DC:8D:F3:92:49","sha256":"E7:5D:02:ED:6B:18:CC:0B:D9:98:94:03:F0:CB:C9:9E:39:1D:07:DF:17:13:E7:6B:62:C5:AF:35:A7:F2:15:9F"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://usdt.6-i.cc/\r\nOrigin: https://usdt.6-i.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 03 Feb 2026 08:53:43 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjTii%2FTJwFdkBlnBAdLlQxFNBUHmZr4xlybRNUgI2F74SdzXDQsEreUDFy2f5HDX5qKmhVhrPUzRFlvn3Knv1sAlLjq1zE0l1cUa9wDcruC9ML8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c80b312cb66783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T00:51:04.580831Z","times_seen":17552855,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":14,"dns":1,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:43.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 16:05:36 GMT","end":"Sat, 07 Mar 2026 17:04:08 GMT"},"fingerprint":{"sha1":"D8:8C:C5:54:BE:AE:D3:9F:8E:B6:13:D7:83:D6:F0:DC:8D:F3:92:49","sha256":"E7:5D:02:ED:6B:18:CC:0B:D9:98:94:03:F0:CB:C9:9E:39:1D:07:DF:17:13:E7:6B:62:C5:AF:35:A7:F2:15:9F"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.6-i.cc/\r\nContent-Type: application/json\r\nContent-Length: 220\r\nOrigin: https://usdt.6-i.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:43 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3mRQqQQ1xwxlCdULEA1Te3KgLylppS2hqGbVEwjDdA%2FyS51sa%2BFrUNqmvuKP%2Fu47eZkGrb5xYTx7Et%2BKmz3EDJdHbkZm8CQ3YrFTrWby54srdQ%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c80b313ab7f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0b10643f75b677f284bfd69156d5ab3f","sha1":"b4b68bdfa12b1c4ba839e104d2b20efaf8f1ea9b","sha256":"77aab8e0dfc2db45f268f64f2cd72f95405fe979c98ee7f79c905e8a393c942b","sha512":"f37820d489a3023cb1c6e3692a434d3d7a0ce0d527742ff812a58d8e51a625251e2facb95e3988e72cfa0c56f2040e3a477643beb2e4a140ac6723a1abebc796","ssdeep":"","tlshash":"d1e08ad51c274c7830517fd4e75d01a6635961439f246294c0d01baa0f7d17f1d1f014","first_seen":"2026-02-03T08:54:07.45087Z","last_seen":"2026-02-03T08:54:07.45087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T08:53:41.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.6-i.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:16:50 GMT","end":"Fri, 01 May 2026 17:16:45 GMT"},"fingerprint":{"sha1":"31:40:3A:70:9A:A4:50:D9:47:15:68:1F:A3:5B:2B:AF:AE:0C:7A:8C","sha256":"FE:9D:1B:31:EF:08:36:80:85:85:27:A2:F1:06:EA:E2:56:E7:1C:31:93:29:DF:6E:6E:A5:BD:F1:3D:25:7B:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt.6-i.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c80b304beab5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371669,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34194)","md5":"11ec55de660a7fc848ec467bc3789277","sha1":"6fbe805c40181cc96daae44be787fbb4477e1a30","sha256":"45c48d06f99a19643e51799312f711e819b77ecf498b9a9a930bcd5bd7f6fee2","sha512":"ec9e593714060c7b5221f8e2c28969b1b8f03a7ec19ad923c76bac5d016d57fd28a6ce1cd703c7308fba5349ce9b3990353ed84172f6dc34c84344cc46505680","ssdeep":"6144:r+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrte:LrnxPOvyJZYLG","tlshash":"58848e98327915796ea302e6a0af6507b1383423b40d88b1f518fc796bf45972077faf","first_seen":"2026-02-03T08:53:53.697938Z","last_seen":"2026-02-03T08:54:07.452977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":888,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Feb 2026 08:53:42 GMT\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-27T00:53:14.360182Z","times_seen":38116,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":294,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/assets/index-DdN_PhRk.css","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.6-i.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:16:50 GMT","end":"Fri, 01 May 2026 17:16:45 GMT"},"fingerprint":{"sha1":"31:40:3A:70:9A:A4:50:D9:47:15:68:1F:A3:5B:2B:AF:AE:0C:7A:8C","sha256":"FE:9D:1B:31:EF:08:36:80:85:85:27:A2:F1:06:EA:E2:56:E7:1C:31:93:29:DF:6E:6E:A5:BD:F1:3D:25:7B:78"}}},"request":{"raw":"GET /assets/index-DdN_PhRk.css HTTP/1.1\r\nHost: usdt.6-i.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=7776000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c80b30baa1b5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136259,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"34eadb7c66f5a1ce5841de532bd43de0","sha1":"96588c46653ed9843ad95d29e0c1d1e71b7fe3c2","sha256":"cb1a4c12919793d280e825617ab59e844325b4e1caff7504d2b752f3e989f572","sha512":"eb9690b426a3cb43724d81a50898fea6ad8ce1fa5e8fdeabf3a548a723df03c721f6571f26c5f91a9cb7b258abd35eb9b7b113b706659a406d0c285e6d7c2ee0","ssdeep":"1536:H8HhQ8hKOY2TEfSR4xOMAPFACagSsMq+WDhzmAkX7zMMDs7HvK9e9tD988R988q:cHhQ8hKOY44EMAPFAgMq+WDhKAjt7Tq","tlshash":"90d390a0b165e53fbc2374f9938cf84c911ab0c1dd2943edfa16a12657c3bf669b2604","first_seen":"2026-02-03T08:53:53.705908Z","last_seen":"2026-02-03T08:54:07.455413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 16:05:36 GMT","end":"Sat, 07 Mar 2026 17:04:08 GMT"},"fingerprint":{"sha1":"D8:8C:C5:54:BE:AE:D3:9F:8E:B6:13:D7:83:D6:F0:DC:8D:F3:92:49","sha256":"E7:5D:02:ED:6B:18:CC:0B:D9:98:94:03:F0:CB:C9:9E:39:1D:07:DF:17:13:E7:6B:62:C5:AF:35:A7:F2:15:9F"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Tue, 06 Jan 2026 05:21:53 GMT\r\netag: W/\"a3a-19b91c12568\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6iCM2lf7YIsHOvl%2FhucKNPFPG8OBEyR8cdbKCsRPYGu3OZCONnU1YMRutD5rzC9BWnyt39rDyXpSxFuh3GC6MwaR4Vymowdwo0HhZXEkTbg\"}]}\r\ncf-ray: 9c80b30bdbf256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-07-25T17:18:25.054015Z","times_seen":694,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":25,"dns":2,"connect":1,"send":0,"wait":130,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.manuscdn.com/manus-space-dispatcher/spaceEditor-DPV-_I11.js","fqdn":"files.manuscdn.com","domain":"manuscdn.com","tld":"com"},"ip":{"addr":"3.164.240.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:42.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manuscdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 28 Jan 2026 00:00:00 GMT","end":"Fri, 26 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"68:26:53:A4:8F:42:CA:32:56:77:AB:8D:05:F6:35:79:D5:77:6B:C5","sha256":"62:A5:BB:25:A0:6D:BC:C1:7F:C7:5B:97:44:4F:7D:57:48:3F:08:9B:73:C5:D4:BF:83:F0:3B:31:7E:4D:AC:C1"}}},"request":{"raw":"GET /manus-space-dispatcher/spaceEditor-DPV-_I11.js HTTP/1.1\r\nHost: files.manuscdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ndate: Mon, 02 Feb 2026 10:07:02 GMT\r\nlast-modified: Wed, 28 Jan 2026 05:44:03 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\netag: W/\"bc310599c77da6dea57604564f1124d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 575a0c6f16652571820285002db8b856.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: rmbyinyWxqYQJ0f3Bfz7U0EWUosqzDJ_56bd8cpqROZj9ewKTPNqJw==\r\nage: 82001\r\ncache-control: max-age=31536000\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":735643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7077)","md5":"bc310599c77da6dea57604564f1124d0","sha1":"7d1aad03bc2257d0e1481701f17990cb301a974f","sha256":"57360372ab8a9ff7101e81a704957276c97acf989b6255ae5f700d750100dfa0","sha512":"354e40fa8467e2265161d2f5a21a799b80a88e5f29010c0ddb8dd46ef58ac3bd7e4b6e4b0c10d0531c6f7afdebad3d0f8496e247f1ba5a4236e51dfdb162384e","ssdeep":"6144:OHsUbgXnKJjDXp+iEhM3jV5d99bgmWOLSFbmhHfUVLA47uLf9bM9CXePjoBnJR8q:OM0g6JjAi4MimWOLSF3ViLFM/v56RF","tlshash":"40f47dddf24a2520839787f868772242b33d3c6174184859fbaddce63a2851c55bbfb8","first_seen":"2026-01-20T08:35:23.035581Z","last_seen":"2026-07-19T09:39:33.009306Z","times_seen":311,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":9,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.6-i.cc/api/trpc/auth.me,crypto.list?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%221%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"usdt.6-i.cc","domain":"6-i.cc","tld":"cc"},"ip":{"addr":"104.19.169.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:43.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt.6-i.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:16:50 GMT","end":"Fri, 01 May 2026 17:16:45 GMT"},"fingerprint":{"sha1":"31:40:3A:70:9A:A4:50:D9:47:15:68:1F:A3:5B:2B:AF:AE:0C:7A:8C","sha256":"FE:9D:1B:31:EF:08:36:80:85:85:27:A2:F1:06:EA:E2:56:E7:1C:31:93:29:DF:6E:6E:A5:BD:F1:3D:25:7B:78"}}},"request":{"raw":"GET /api/trpc/auth.me,crypto.list?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%2C%221%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: usdt.6-i.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.6-i.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:43 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ncf-ray: 9c80b3134a195a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: trpc-accept, Accept-Encoding\r\nx-powered-by: Express\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6915,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"00760898a4d7d05baf509f6fafd8cab8","sha1":"a6cfdb8950b365ce1acee3aabc6db4010f3f53a4","sha256":"375da081bee0c87ee85e4ddc09e497a6ab0c31f36896dafb507611da36a33b13","sha512":"dd5713757798fbf6ab7e64c8032126e8560963634a8e47089522222be82d4a65ba322ac96641cc9d6698867e0bab6dfa31e292c8fbc360b7e24836e159a03ec6","ssdeep":"96:AL0oMz8+xfS52dcqfGUN6U3UeUYz9qi5mTwZcLai1tP5xa4opNt9gQ4J0:AL/YJpUW+NUZXhHsywTnhDy9z4J0","tlshash":"8fe124b90379bf5cd26505e79990398429ba70e82dfc48c5dfcf4e888598c322d4fa76","first_seen":"2026-02-03T08:53:53.704048Z","last_seen":"2026-02-03T08:54:07.458526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.manus.im/api/user_behavior/batch_create_event_v2","fqdn":"api.manus.im","domain":"manus.im","tld":"im"},"ip":{"addr":"52.4.64.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://usdt.6-i.cc/","date":"2026-02-03T08:53:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus.im","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 31 Jan 2026 00:00:00 GMT","end":"Mon, 01 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"20:C6:7D:42:A0:1B:0A:B6:2F:E3:17:63:BD:B2:91:41:EF:0E:F6:3F","sha256":"6B:61:20:34:9B:BA:DA:B1:60:06:35:35:0D:82:98:B8:F3:BE:32:3E:B0:9C:2F:0A:0C:9E:89:79:D4:9A:7C:02"}}},"request":{"raw":"POST /api/user_behavior/batch_create_event_v2 HTTP/1.1\r\nHost: api.manus.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://usdt.6-i.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.6-i.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"{\"events\":[{\"event_name\":\"session_file_view\",\"ext_data\":{\"type\":\"space\",\"url\":\"https://usdt.6-i.cc/\"},\"event_at\":\"2026-02-03T08:53:43.427Z\"},{\"event_name\":\"manus_space_show\",\"ext_data\":{\"url\":\"https://usdt.6-i.cc/\"},\"event_at\":\"2026-02-03T08:53:43.427Z\"}],\"client_info\":{\"client_type\":\"web\",\"client_version\":\"\",\"product_name\":\"Manus\",\"timezone\":\"UTC\",\"timezone_offset\":0,\"tm_token\":\"48cdb2899bd62471e57f51e326a3b378\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 08:53:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 21\r\naccess-control-allow-origin: *\r\nserver: APISIX/3.11.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache APISIX:3.11.0","description":"Apache APISIX is an open-source, cloud-native API gateway developed by the Apache Software Foundation. It provides a scalable and high-performance solution for managing and securing API traffic.","website":"https://apisix.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:*","icon":"Apache APISIX.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T00:51:04.580831Z","times_seen":17552855,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":222,"dns":1,"connect":94,"send":0,"wait":101,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
