{"report_id":"85901dce-3e27-4529-bc7f-c07e1472ebc8","version":0,"status":"done","tags":[],"date":"2026-07-19T11:38:31Z","url":{"schema":"http","addr":"shopeeping.top","fqdn":"shopeeping.top","domain":"shopeeping.top","tld":"top"},"ip":{"addr":"172.67.219.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"title":"请输入密码访问","dom":{"size":8065,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (345)","md5":"dcb65da8b997c1a1551418e14d39be95","sha1":"0857872406989a26ffaf1b2a50bd28eff12f244c","sha256":"69e41b39319ab002c1e49f87b88f00f0dfbc4f0fd3cd27471f8f43e5834eb86d","sha512":"a8d562f2e93b6a3be0e4837c8658c138c7bb411dd2c593a1834ed04aa808f5ea8f7ef8914ace9e39c2772994256a2b21070a539dcf300694d4c057bde842684c","ssdeep":"192:h/Xqtnptqh+29Zh3ydEz/7/C7lC/GxuBtdsn10f:1Xq1ORydEzzKco0cn10f","tlshash":"96f1b8a5d1e68412132380c97575f70c6f76e00fa51adb48f6ec49581faafe78c1bd88","dom_hash":"domhashb9f4ae8cb417144c4dfe9a89c4b9b79e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"shopeeping.top","fqdn":"shopeeping.top","domain":"shopeeping.top","tld":"top"},"ip":{"addr":"172.67.219.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T11:38:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-07-14T14:48:37.544814Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"2026-07-19.urldance.com","ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"domain_registered":"2024-03-28","domain_rank":0,"first_seen":"2026-07-18T16:13:15.598508Z","last_seen":"2026-07-18T16:13:16.225958Z","alert_count":0,"request_count":11,"received_data":155484,"sent_data":5613,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"shopeeping.top","ip":{"addr":"172.67.219.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":1,"received_data":624,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"79ec980e69ef2c72ef23ce2d64d709a7","sha1":"f1cbeb8b263466de81e93b45e079fc420ecb6366","sha256":"8e17644d1d19ea56c3e95b0d5cf0f523cf6f312841bd9c1784d99cc210b04e0b","sha512":"abae866621800faebdabc4a11c0788ef3462b23be13bc8fda0a6b828a14e2ef0335b5e1bd6c1e271b8d7d225e3f460535d6befcd8846c0f7a3008a3a2cb9ca0b","ssdeep":"","tlshash":"4ec092862081948a2a7231d29f03b31ab4074afe48559688791c47603f6cb3fca2e7c7","size":134,"data":"","first_seen":"2026-05-25T18:40:40.65696Z","last_seen":"2026-07-21T12:24:28.641116Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"59b00af6289f979bc1d2504217270521","sha1":"0a6d3576f882244593c7f652e23238f1e9863d43","sha256":"44aa8a9fc76a1dfc46230f594913f115a0c26dd18063f6329073c7fb48a9b70d","sha512":"e60e4b6b0665357637fb7b82e6b6323256b0be867dcac64f3e43d8bb5f8a173f8202dc6a4dea97081c2ef345e38943d08eb206cbdbfc0a6a15c713f05705d65c","ssdeep":"","tlshash":"6f21aba0fa855c6255d390acb912f758b976f00eb03ad38cf62c43984f62cdab049c56","size":1277,"data":"","first_seen":"2026-07-05T17:47:55.91794Z","last_seen":"2026-07-21T12:24:28.641964Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"13349d3a0510382f2743955a49926c19","sha1":"d08e5ff9cf176539502d566c9abbe59b76cd8576","sha256":"cca6f2d9bf77e4da19c686724f2540e82d6a1437caeddcdf814801d0afd34cf9","sha512":"a1264ac4bba5ff9e4015fd6457f610e102468169b609613ddb5f3baa56f808bf98a92c173802979ab8690ea08bc64485c6ec3107d47781b53809f7df60a93d88","ssdeep":"","tlshash":"2ee09bd2a2994e05eb3c30d8850c17441c51d3b1285bd5b97e8dcc1d60fd7bba22d6e9","size":403,"data":"","first_seen":"2026-07-05T17:47:55.918759Z","last_seen":"2026-07-21T12:24:28.642886Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98427fe3f5f304302e1fd1dd7e8ff849","sha1":"a372137ba5a1fbcaaea0cb428436b3e86200399c","sha256":"35ac08e28c944eee6b34510f8162503fcf673626a7b43637d11f81c9ae0303ab","sha512":"7f16dc3f6f30378147294513534538762c7899fb706023af555d9bb86a0bd19f9009b0da5f8c6558d41915cb3e2e7a33c17998f4c5d6a4ab144401d8f2410543","ssdeep":"","tlshash":"3d410faea26b41100717c0db25fa59082333701f5dc9ad18f53c69885f8e3aa40a2aad","size":2292,"data":"","first_seen":"2026-07-05T17:47:55.919655Z","last_seen":"2026-07-21T12:24:28.643697Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6ec7e725d17f780e2e406790960dc36","sha1":"99522f056931e56da7de26e8f671df6542608c14","sha256":"f947880e76992314a8606a646a5c862b587bc09c6c32adecb20ee575cb00595a","sha512":"2c982d29f96f64e9dd7fc921df970013d6bb262f08d61011123eed575ecc44e666e215d2feca667d7a10c680bf6a8fa3ad0806105ec8fa99122779e50f15f6a5","ssdeep":"","tlshash":"24d0970f2c246838236a047c12baea4cb062288c003eed0090ece8019d60ee64c2ebc8","size":252,"data":"","first_seen":"2026-05-25T18:40:40.659616Z","last_seen":"2026-07-21T12:24:28.644513Z","times_seen":703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3da311247577a6f80b9b6ae63bd039e1","sha1":"4ecd576f28569e0b1fe6580173321298bf1c179c","sha256":"87c7a25600826c446d29d6c3721538b7f02f28fd7c17021cb1489a3c70a7c9bf","sha512":"4adc1a2142963666e22cfc48975ba583690b523c978ca8db4869a640207e3f856bfef5ca03797c74a0f954ab7f2cc0322ce3bba6d7ec4e4e3089234c98b54d8d","ssdeep":"","tlshash":"d590022900430c4702268bb205ba2bc3e05d4063011cc08624244cc64043c90e04da3a","size":54,"data":"","first_seen":"2025-03-07T06:58:31.251344Z","last_seen":"2026-07-21T12:24:28.645466Z","times_seen":6708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/js/jquery.min.js","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"567eec7717cb514434c657d90e88afd2","sha1":"8c235957586ac868bff7a0b4827cf163cf82d9de","sha256":"3e2a2e48864b44198261695e5e93ffa4cb2395f6836db0e920974718d11f24d4","sha512":"6bf77a643c6f8296b2756cbc20a4d2c9cf9aa3b703eb210f30449f1dd87c62d38eec42be30aed820e3eaa694de854ac7f9b7dff6b8d606035d82a15910d46e27","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BuCKKBEqBsojZlOPmw:jgZm0H5HO5+vCKWZyPmHQ47GKc","tlshash":"9d8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88151,"data":"","first_seen":"2023-03-07T22:11:41Z","last_seen":"2026-07-21T12:24:28.638271Z","times_seen":6888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/js/layer.min.js","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d39fc6c1db94e8d211313805a70c24b","sha1":"021fdc67c0acd11655fa605cb26ffd1b19ab243a","sha256":"be5b759996d0b5b388dc5922f99d18d5f3feb0ffb3b1a9d5b73b8c0a427ab8d4","sha512":"d221bfc9a753cff96d629f1f6f3cd9789aa9eee6f46b43bca3704550a942a9483b1bbd8e48cd8048b89a85e45f7a4e4f968eaf2785afece0636273db3aec0ed7","ssdeep":"384:sseNGhG5ql45QlESAJDVwJZY+WxeJwCj+jC6Tb2u:slkmqlHlESAJDVwJZYJxau","tlshash":"1aa2a56a215035a72223c199e14fbe0b31b21d25d7074128f16af4bd4ebcda9a277f4f","size":22256,"data":"","first_seen":"2023-03-07T12:58:08Z","last_seen":"2026-07-21T12:24:28.639221Z","times_seen":7270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.615Z","timestamp":1784461076615,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T15:24:24.718667Z","times_seen":17424571,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/images/share_lines.webp","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.626Z","timestamp":1784461076626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /images/share_lines.webp HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 354\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"share_lines.webp\"; filename*=utf-8''share_lines.webp\r\ncontent-md5: ZDlFGFR7Vy07ttcdvaoP4g==\r\ncontent-transfer-encoding: binary\r\netag: \"Fn-ZoIcHSfiG1XYn7NiR4ShzFazr\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:16 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cz27;SRCPROXY:cz17;SRC_10.70.57.30:10;SRCPROXY:10;QNM3:24\r\nx-m-reqid: 6SsAAC51D_CdbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: 3B4AAAB0SvGdbcMY\r\nx-svr: IO\r\nx-ser: i91276_c29916, i2473069_c29430, i1935869_c22759\r\nx-cache: HIT from i1935869_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":354,"size_decoded":1208,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64394518547b572d3bb6d71dbdaa0fe2","sha1":"7f99a0870749f886d57627ecd891e1287315aceb","sha256":"a79fd0015a10c5ee30796bcbee2aaee6f9fb6eea8abc99cc07bbd8e0e6304017","sha512":"191617c203e2ac47312005f73b7cc585e5d45c6543770b8375e73a35f05959e2d4b6f8752b92d68dfd2d3fd07d8174de6ecfd879b290337ef986586804710a57","ssdeep":"","tlshash":"5fe0c002d113b262c175ec7482c6300b673f01b6234697908883803d176ed031bc2165","first_seen":"2024-12-14T01:59:30.572173Z","last_seen":"2026-07-21T12:24:28.636349Z","times_seen":6988,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/js/theme/default/layer.css?v=3.5.1","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.697Z","timestamp":1784461076697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /js/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/html\r\ncontent-length: 874\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"errno-404\"; filename*=utf-8''errno-404\r\ncontent-encoding: gzip\r\ncontent-md5: o3AJLCuUpcMlAUwTtA5Khw==\r\ncontent-transfer-encoding: binary\r\netag: \"FlLQOHdTIUy-GaYfveFWpxl13eZQ.gz\"\r\nlast-modified: Sun, 05 Jul 2026 20:25:24 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:yzh159;QNM3/404\r\nx-m-reqid: SVAAAHII9xjlrcMY\r\nx-qnm-cache: Hit\r\nx-reqid: k_IAAADoEnjercMY\r\nx-svr: IO\r\nx-ser: i63552_c29736, i1935953_c23471, i1935921_c22759\r\nx-cache: MISS from i1935921_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1902,"size_decoded":1704,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a370092c2b94a5c325014c13b40e4a87","sha1":"52d0387753214cbe19a61fbde156a71975dde650","sha256":"1e288a573ff41010f011dd6c47df9cbf4e94aec86615a17b414f13e648b0b042","sha512":"e1bf85a6252a6859acc61672fe876fb41e487e9921a5084a70a2ad4b802dcbf72f41570ec8ce7b07ee411e29d3c3dec3afa81ff99d4956c39770795fa555c08d","ssdeep":"","tlshash":"b241655a9640140cb13162b439ba2758cde380630503e9b17addf4236ff967a86b7ed4","first_seen":"2026-07-05T21:26:02.776079Z","last_seen":"2026-07-21T12:24:28.628835Z","times_seen":44,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/css/layer.css","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.375Z","timestamp":1784461076375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /css/layer.css HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/css\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"layer.css\"; filename*=utf-8''layer.css\r\ncontent-encoding: gzip\r\ncontent-md5: wjTrBtXzIFUJIpTniVfxfQ==\r\ncontent-transfer-encoding: binary\r\netag: \"FvFe4Ly5aU8y9eHVJPJlOqDdBDQC.gz\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:45 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:yzh166;QNM3\r\nx-m-reqid: MHYAAJaRT-SdbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Hit\r\nx-reqid: NikAAAC4CtqdbcMY\r\nx-svr: IO\r\nx-ser: i90930_c29916, i2473069_c29430, i1935949_c22759\r\nx-cache: HIT from i1935949_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":14271,"size_decoded":3624,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-07-21T15:11:55.314442Z","times_seen":56503,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/js/layer.min.js","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.385Z","timestamp":1784461076385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /js/layer.min.js HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/javascript\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"layer.min.js\"; filename*=utf-8''layer.min.js\r\ncontent-encoding: gzip\r\ncontent-md5: XTn8bB25To0hExOAWnDCSw==\r\ncontent-transfer-encoding: binary\r\netag: \"FgIf3GfArNEWVfpgXLJv_RsZqyQ6.gz\"\r\nlast-modified: Sun, 05 Jul 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:yzh166;QNM3\r\nx-m-reqid: MHYAAPy_ov2dbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Hit\r\nx-reqid: axUAAABHUOCdbcMY\r\nx-svr: IO\r\nx-ser: i63544_c29736, i2472853_c29430, i1935945_c22759\r\nx-cache: HIT from i1935945_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22256,"size_decoded":8535,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22256), with no line terminators","md5":"5d39fc6c1db94e8d211313805a70c24b","sha1":"021fdc67c0acd11655fa605cb26ffd1b19ab243a","sha256":"be5b759996d0b5b388dc5922f99d18d5f3feb0ffb3b1a9d5b73b8c0a427ab8d4","sha512":"d221bfc9a753cff96d629f1f6f3cd9789aa9eee6f46b43bca3704550a942a9483b1bbd8e48cd8048b89a85e45f7a4e4f968eaf2785afece0636273db3aec0ed7","ssdeep":"384:sseNGhG5ql45QlESAJDVwJZY+WxeJwCj+jC6Tb2u:slkmqlHlESAJDVwJZYJxau","tlshash":"1aa2a56a215035a72223c199e14fbe0b31b21d25d7074128f16af4bd4ebcda9a277f4f","first_seen":"2023-03-07T12:58:08Z","last_seen":"2026-07-21T12:24:28.639221Z","times_seen":7270,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/images/xiaologo.webp","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.622Z","timestamp":1784461076622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /images/xiaologo.webp HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3266\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"xiaologo.webp\"; filename*=utf-8''xiaologo.webp\r\ncontent-md5: 5TLNnfDmTpF0J5kQFCOxNA==\r\ncontent-transfer-encoding: binary\r\netag: \"FsBCR1sEFZtw6-f-ChZIZPjg-I1r\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:16 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cz29;SRCPROXY:cz14;SRC_10.70.34.25:7;SRCPROXY:7;QNM3:8\r\nx-m-reqid: 0S4AAKnMzNSdbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: HWAAAADe0tSdbcMY\r\nx-svr: IO\r\nx-ser: i91122_c28781, i2472853_c29430, i1935945_c22759\r\nx-cache: HIT from i1935945_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3266,"size_decoded":4112,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e532cd9df0e64e91742799101423b134","sha1":"c042475b04159b70ebe7fe0a164864f8e0f88d6b","sha256":"078e32f0c3c5a4e6b8ff81c9c2450a3ed5b907f597fb7d6daabb05f76e04b3fd","sha512":"57781e301b1f9a92e1bbe459c64c5120ece97d6ee688e63d15a620af3263f1add4819c3b8eaa70080e0d15e3135558657d981769f30fa65c49961d2295a5763a","ssdeep":"","tlshash":"b6615bccdd91ea3268b2ea216fd7d0a20a8b349f1341fc3196c14d613238e2bb785521","first_seen":"2024-12-14T01:59:30.576573Z","last_seen":"2026-07-21T12:24:28.640155Z","times_seen":6946,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/images/share.webp","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.624Z","timestamp":1784461076624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /images/share.webp HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 672\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"share.webp\"; filename*=utf-8''share.webp\r\ncontent-md5: G2j9BeXWLgOXnhjRpKp20A==\r\ncontent-transfer-encoding: binary\r\netag: \"FsVFaO7fnSjf_tXX40LCb2QCT00O\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:16 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:yzh162;QNM3\r\nx-m-reqid: s60AAGnRytOdbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Hit\r\nx-reqid: nPwAAABFvM2dbcMY\r\nx-svr: IO\r\nx-ser: i62078_c26647, i2315527_c28337, i1935893_c22759\r\nx-cache: HIT from i1935893_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":672,"size_decoded":1467,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1b68fd05e5d62e03979e18d1a4aa76d0","sha1":"c54568eedf9d28dffed5d7e342c26f64024f4d0e","sha256":"c8eb0cdd7d11b09ede592f0ca08645098a5448e56dce1d17fc3a8b8edc9c90fa","sha512":"62f767185c47199f7e65f2559220ea76e1fddb7c7542433a803f07d4ffd2414467ee8b5e5dc78ab8282a7cf71e4330f967b4270de1439d8415524cfda5cb53e9","ssdeep":"","tlshash":"24018881356ddd4ae2095d7ce379c343b4028f40113a6d5b6ca5e4d3100d5365ad6dc2","first_seen":"2024-12-14T01:59:30.574289Z","last_seen":"2026-07-21T12:24:28.62713Z","times_seen":6991,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/favicon.ico","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:58.163Z","timestamp":1784461078163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:58 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2459\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"favicon.ico\"; filename*=utf-8''favicon.ico\r\ncontent-md5: jo30+ZSZUrSNF/G3v45Tsw==\r\ncontent-transfer-encoding: binary\r\netag: \"FmFA4Egfqjz4vssImfJ_sj0hG2Lc\"\r\nlast-modified: Tue, 07 Jul 2026 13:42:49 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:yzh163;SRCPROXY:yzh172;SRC_10.70.57.21:26;SRCPROXY:26;QNM3:31\r\nx-m-reqid: cUQAAEvrxGBjasMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: YekAAAAmdGFjasMY\r\nx-svr: IO\r\nx-ser: i62078_c26647, i2473309_c23471, i1940231_c22759\r\nx-cache: HIT from i1940231_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2459,"size_decoded":3310,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64 with PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"8e8df4f9949952b48d17f1b7bf8e53b3","sha1":"6140e0481faa3cf8becb0899f27fb23d211b62dc","sha256":"dfa5b1aa749d05f4f6633aa65fe8f4320823d6f170f2e84cf9da32a85c5359d9","sha512":"619974fb5ab68f6ecf565bf87d8dc3cd6912c448c444a39ae8beac41a6d91e5a788f1882805a35686beb7c7c7d95918eb4815f3dd883b2fe47b1509e19f6d598","ssdeep":"","tlshash":"2e512cf16759cc7efc3ef02dd267abfd691e48b0512004fe780548781d58d6964a3046","first_seen":"2026-07-09T06:08:42.237922Z","last_seen":"2026-07-21T12:24:28.637284Z","times_seen":35,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shopeeping.top/","fqdn":"shopeeping.top","domain":"shopeeping.top","tld":"top"},"ip":{"addr":"172.67.219.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T11:37:55.284Z","timestamp":1784461075284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shopeeping.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Jul 2026 17:17:58 GMT","end":"Fri, 16 Oct 2026 18:15:12 GMT"},"fingerprint":{"sha1":"B6:06:CD:D7:DD:CB:74:5B:79:12:8D:37:E3:76:E5:FC:0F:64:2B:18","sha256":"C5:F4:02:08:D0:2F:0F:80:D3:61:F2:21:3A:DD:2A:BF:26:4E:95:81:56:D5:3E:09:38:38:26:62:63:87:46:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: shopeeping.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 11:37:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: https://2026-07-19.urldance.com/us?shopeeping.top\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QwINqiZxDjW09GhG7mZhuHSfNrJkDiz4Nc1YEtpa34qfOVzo%2FWxYObIwDaKr0QiHyAuyOPo6PQ0iN0xgwoqi6BkQJqs8CeBkCnSM7UpsMXFo1BuITvaY%2BdCGIRIgZmJxg%3D%3D\"}]}\r\ncf-ray: a1d96fd91c200883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T15:24:24.718667Z","times_seen":17424571,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":77,"connect":17,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"shopeeping.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/us?shopeeping.top","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T11:37:55.717Z","timestamp":1784461075717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /us?shopeeping.top HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/html\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"us\"; filename*=utf-8''us\r\ncontent-encoding: gzip\r\ncontent-md5: Ceemc7bGFl9r+oo1HpObKA==\r\ncontent-transfer-encoding: binary\r\netag: \"FoBNzGi3I-qFbw0hLeoBg91fenwn.gz\"\r\nlast-modified: Sun, 12 Jul 2026 07:42:02 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:yzh156;QNM3\r\nx-m-reqid: _dYAALMp6cadbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Hit\r\nx-reqid: pNcAAAB5kY-dbcMY\r\nx-svr: IO\r\nx-ser: i93632_c29916, i2315539_c28337, i1935921_c22759\r\nx-cache: HIT from i1935921_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":7977,"size_decoded":3893,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339), with CRLF line terminators","md5":"09e7a673b6c6165f6bfa8a351e939b28","sha1":"804dcc68b723ea856f0d212dea0183dd5f7a7c27","sha256":"d88be656783b3a4a4f9f7c14909bf1b18fa9d57ec5bf03759bdaad26bc41f0ae","sha512":"4e71a975c532253846e29c27282fdbf26ca242e5b1c5b04320cf960ca641f305ef611feb4be8e2d610455cef6c870dd84f04551d88abf896601433dc37f056d3","ssdeep":"192:4i27mxCVqa+LL9WXtvyPpLp4sFZlVxhG8:n27c8XNyxLp4sHxhG8","tlshash":"b6f196a5e18688110333c0ea6971e70cfe76a00f5656c748f5fc4e5a1fb6aa5cc0bed8","first_seen":"2026-07-12T08:59:47.718226Z","last_seen":"2026-07-21T12:24:28.631605Z","times_seen":31,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":275,"connect":27,"send":0,"wait":28,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/css/style_mini.css","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.378Z","timestamp":1784461076378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /css/style_mini.css HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 1100\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"style_mini.css\"; filename*=utf-8''style_mini.css\r\ncontent-encoding: gzip\r\ncontent-md5: vZcIkitSCTEoQAXmhY1YEQ==\r\ncontent-transfer-encoding: binary\r\netag: \"FjXgUArdv_WfYsYm4Q7oZPwWgnvL.gz\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:44 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cz29;SRCPROXY:cz14;SRC_10.70.57.23:17;SRCPROXY:17;QNM3:91\r\nx-m-reqid: 0S4AAMqErcydbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: 6HQAAAArItGdbcMY\r\nx-svr: IO\r\nx-ser: i91188_c28781, i2473285_c23471, i1935845_c22759\r\nx-cache: HIT from i1935845_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4030,"size_decoded":1999,"mime_type":"text/css","magic":"ASCII text, with very long lines (4030), with no line terminators","md5":"bd9708922b520931284005e6858d5811","sha1":"35e0500addbff59f62c626e10ee864fc16827bcb","sha256":"dfeac1f27a3ebdf06ccead6afb74ca8980b59f2e150a3c6f19f97c29368f89d4","sha512":"3fb69209dd36e78b32cd8a3186598da42f1fcbf380f69d5b373b1a5ba47c0d28a960e08d1aa659d5b3b75bb60ea54970c7433cc4bd22fcf3defe67adb2f1cc00","ssdeep":"","tlshash":"f9812073ca512545d023cf15a7d85b88563cc223a5a30cdf7306741b9787aee21e9b9b","first_seen":"2024-12-14T01:59:30.561961Z","last_seen":"2026-07-21T12:24:28.634193Z","times_seen":6743,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/css/card.css","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.380Z","timestamp":1784461076380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /css/card.css HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 344\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"card.css\"; filename*=utf-8''card.css\r\ncontent-encoding: gzip\r\ncontent-md5: FX1c5ohsyE28Pheg+IaDxg==\r\ncontent-transfer-encoding: binary\r\netag: \"FgoPXuqaw_0TCxCjpg67v4Fqd1KJ.gz\"\r\nlast-modified: Sun, 05 Jul 2026 13:02:45 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:yzh155;SRCPROXY:yzh171;SRC_10.70.34.25:25;SRCPROXY:25;QNM3:28\r\nx-m-reqid: Ca4AANWCetCdbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: CMAAAACzo9CdbcMY\r\nx-svr: IO\r\nx-ser: i62132_c26647, i2315455_c28337, i1935869_c22759\r\nx-cache: HIT from i1935869_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839,"size_decoded":1234,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"157d5ce6886cc84dbc3e17a0f88683c6","sha1":"0a0f5eea9ac3fd130b10a3a60ebbbf816a775289","sha256":"021329ba8965473ae2464bf554577ae3bf796d64e25bae7b73a7230e7319b91f","sha512":"8cf56c242c2f1b60e19dae9237406dd6117ef5ece81b79a7ef4bf4486780f56a383733f80ab2abed958eecd9a59e1cef213c9d6f7706dc48c81848619c3b612c","ssdeep":"","tlshash":"cd01fd3cec61010a313de6e45b9003c7c621d26367461838bfe972620f706fc5a26ecc","first_seen":"2026-04-23T02:28:40.357475Z","last_seen":"2026-07-21T12:24:28.635248Z","times_seen":1391,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2026-07-19.urldance.com/js/jquery.min.js","fqdn":"2026-07-19.urldance.com","domain":"urldance.com","tld":"com"},"ip":{"addr":"156.225.108.43","port":443,"asn":139057,"as":"LEGEND DYNASTY PTE. LTD.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2026-07-19.urldance.com/us?shopeeping.top","date":"2026-07-19T11:37:56.383Z","timestamp":1784461076383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.urldance.com","organization":""},"issuer":{"commonName":"TLC DV TLS CA","organization":"泰尔认证中心有限公司"},"validity":{"start":"Sun, 07 Dec 2025 23:08:14 GMT","end":"Mon, 07 Dec 2026 23:08:13 GMT"},"fingerprint":{"sha1":"6A:BE:28:89:9A:3C:58:F1:47:60:A2:13:4E:14:9F:B3:39:E8:E2:F5","sha256":"07:C5:5B:CC:BF:E1:FD:1A:7F:0B:6F:87:8D:14:85:81:4D:E0:3C:9E:BB:B5:65:55:82:5F:97:3C:A8:E9:B7:3C"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: 2026-07-19.urldance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2026-07-19.urldance.com/us?shopeeping.top\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 11:37:56 GMT\r\ncontent-type: text/javascript\r\nserver: openresty\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"jquery.min.js\"; filename*=utf-8''jquery.min.js\r\ncontent-encoding: gzip\r\ncontent-md5: Vn7sdxfLUUQ0xlfZDoiv0g==\r\ncontent-transfer-encoding: binary\r\netag: \"FowjWVdYashov_egtIJ88WPPgtne.gz\"\r\nlast-modified: Sun, 05 Jul 2026 20:03:46 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cz25;SRCPROXY:cz13;SRC_10.70.34.26:14;SRCPROXY:15;QNM3:33\r\nx-m-reqid: 3KYAAMR5Y-6dbcMY\r\nx-qiniu-zone: 0\r\nx-qnm-cache: Miss\r\nx-reqid: -IEAAACcZu-dbcMY\r\nx-svr: IO\r\nx-ser: i57526_c25893, i2473087_c29430, i1935889_c22759\r\nx-cache: HIT from i1935889_c22759(cloudsvr)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88151,"size_decoded":31723,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"567eec7717cb514434c657d90e88afd2","sha1":"8c235957586ac868bff7a0b4827cf163cf82d9de","sha256":"3e2a2e48864b44198261695e5e93ffa4cb2395f6836db0e920974718d11f24d4","sha512":"6bf77a643c6f8296b2756cbc20a4d2c9cf9aa3b703eb210f30449f1dd87c62d38eec42be30aed820e3eaa694de854ac7f9b7dff6b8d606035d82a15910d46e27","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BuCKKBEqBsojZlOPmw:jgZm0H5HO5+vCKWZyPmHQ47GKc","tlshash":"9d8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T22:11:41Z","last_seen":"2026-07-21T12:24:28.638271Z","times_seen":6888,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}