{"report_id":"915599f9-17bf-46d6-b34a-cff2026621ba","version":6,"status":"done","tags":[],"date":"2026-03-10T19:20:35Z","url":{"schema":"http","addr":"bujj163.com","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"172.67.163.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bujj163.com/","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"title":"BUFF — Number one among all skin sites for CS2!","dom":{"size":18620,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (401)","md5":"1ee5fe1bc732cd648254da2ac4f45b38","sha1":"22a9a7185966b99892b06677fa7589197b053242","sha256":"ae61e14da707f5045236c83f4aa3247152de1793d93f57c1899d31c02187296c","sha512":"cc73692f3d7cbd918d159f5c128ade588395ffafecfd706da85e50eadebecf55ce00668d6687cd40a9fc9e0e6b190ffe23e885817df6fd9cab9bd05d5fe4612e","ssdeep":"192:44vlu9748g4pYU6NHg9KZguluht+JqlixP2oUTElAURSbbAd7l:olY9eYgnaJqlixPgERZ7l","tlshash":"f5827162b4f07a73014393d2fb672b26bee69057d7004514b1bc83a85fa5e8bc97366c","dom_hash":"domhashaed1e1f8e7085d16999ad77665ed3e53","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bujj163.com","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"172.67.163.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T19:20:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bujj163.com","ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-19","domain_rank":0,"first_seen":"2026-03-10T19:20:35.996333Z","last_seen":"2026-03-10T19:20:35.996334Z","alert_count":15,"request_count":15,"received_data":1347785,"sent_data":6569,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-08T23:41:39.563153Z","alert_count":0,"request_count":2,"received_data":41984,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":9108,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":1,"received_data":85139,"sent_data":731,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bujj163.com/js/aos-initilization.js","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","size":231,"data":"","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-06-08T06:12:46.116586Z","times_seen":1586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/js/script.js","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"648dad0bd5676ff30c28b1a10512f60b","sha1":"51a1260ed68d32bce390633e273f650b90d50060","sha256":"287a6d8fa4e613603fd2b8b072a026732697119845810c787b5d3507537050fa","sha512":"48666633b3d64b105ad1361b58c6392e5ae104c3f8cdfb2563300e1f629dc1d347e4a9de8e140300787fc144abf45585ce7b06618093ace56bec2e847aeeda56","ssdeep":"","tlshash":"35f049eac0744b7145165383d465627cf89604a99989a47ae238da811c00667b9e378d","size":634,"data":"","first_seen":"2025-08-01T23:24:52.33555Z","last_seen":"2026-03-27T16:21:32.542831Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-08T08:59:04.957418Z","times_seen":20070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bujj163.com/img/hero/background.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/hero/background.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 783299\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-bf3c3\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rz0DMU7QYtuH%2BnYZo1hdsIoxK9m1GJPt0z5D6cvCDIiqmL%2BQBZvZ25SzyK6KOdvqNuwy4a0T4CR5aNjNYDU4zTcHv5Xd6Xxiad2%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac437a81acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 442, 8-bit/color RGBA, non-interlaced","md5":"e779f705ba3a29fdd79f4e8dc0dcfe61","sha1":"859e18d0cea7c843a24d636cd7c13826efe7f334","sha256":"b3fe3c36ab2a3564654c5bf42c1e17aa494770d42a974302460efb3b02ccc967","sha512":"e5f6332488e0a5556e99dcb9ef4fe59c80b19b25158a7a604ed3718147a2de383ef244cb43bfe7bf5fdf4c782eb75a9b208f3647559efea361025b3bb5557710","ssdeep":"12288:HKHWF1zGRFm67p5Ihi+Da5pXj5Xj9/CB/47Fq8dJXJjXaW7M3k6nTiWpg4V2X2Mv:v7Qm6Wi+C5NCBw7rzXJzaW7M3ZT2GGia","tlshash":"cef4237d4014aa61684fd4339fa611f40fbadc6a46771ce4913e41e7beea0e5b30fa06","first_seen":"2025-08-01T23:24:52.390139Z","last_seen":"2026-03-27T16:21:32.540157Z","times_seen":11,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/css/style.css","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"67dac0f5-35ec\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDkUdtFvATtA31c%2BmEHSsqULZQhu2oiCkZK8NVWPW%2BawozSPUf9j%2BO5exvkxzQuOK%2BK7fwGm160dWm%2BW5cw7CrM8zpNWwPQwnq9G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a14acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13804,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4df2ee35d7e08c6600e2cb305a360698","sha1":"2a3bd8d443667949232c9e0f7179aa134321fda9","sha256":"f677c85bca21c09e240ef9f89b5fd30e7f7afe1a410570284c8d6854796d6c6b","sha512":"e83745d651a0d0c1fc50c4f68df45aaf41a9ee89383ba3ffd2e61959c0c5734d2ae122df73ad0cbff36f1d79c37db9def0d6ec8e160a2337badec987d0232857","ssdeep":"192:m1xFj9Lb2EGZhQFrSaFfKHHq9+2y3ZTZwycF3:QFsKfKHHq9+2yYZF3","tlshash":"e152011336e1a50078178caa37475b6a63784427450eeafc3efb640c9fda5e5c69238f","first_seen":"2025-08-01T23:24:52.369823Z","last_seen":"2026-03-27T16:21:32.559268Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/icon-2.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/icon-2.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 813\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-32d\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2UNNEN1NikF7D5gB3YHMqNxWcNgXKRSTCDH7xJkiwiO8pDXxMCL7W3YZid9ZUTD1yV8%2B6%2BOOUcSFqusWwYYfumCxvAQCwBniZdv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a1bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"2b6d53d8ddd0b5c7cd988f6835cdac14","sha1":"d689539e6ade832ea7cf703e8cc436deb460fa57","sha256":"5ef5f52be74cda41e8620519fd66d2cfadfb7e4bf42ea531d07a70bcfb2b7720","sha512":"35af647cddda8fd6770eb14a34fd44cf8a26897c99a69f305a4c98a51486b55e71acc48610fdbf189a4ade14763b4f7e34b60e1271d7a0e8741ac534240b0951","ssdeep":"","tlshash":"35018187b480340c987cdda587838663686aaf1043aa0988d1c16030e88b4fe1a89ba0","first_seen":"2025-08-01T23:24:52.362181Z","last_seen":"2026-03-27T16:21:32.550289Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9da4ac414b210daa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1511397\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Mar 2027 19:19:46 GMT\r\nlast-modified: Sat, 07 Feb 2026 06:04:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01KGVB6NBDMQ2RETKW4JBY27SJ-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-06-08T08:59:04.957418Z","times_seen":20070,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":24,"dns":1,"connect":10,"send":0,"wait":43,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/js/aos-initilization.js","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /js/aos-initilization.js HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"67dac0f5-e7\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qWHP3zCz%2B4A04qLCcRczcILRi93fGleA92EyovH6FLBuKqfTgub%2Fmw6pTxUDGAZs6Xozv%2BmTM6u1si1NMRYqtYb0PSecHwuS9bpQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a15acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3c4b15dbbc0f214349697bdd9b34f435","sha1":"0a95651d490a06a4d39e516050e0c66e0506ef30","sha256":"eea3e0704c57a45f077e054460b75b021e1aaec5a4f93ebdf47db958ccfa4379","sha512":"dd710f416e7a15aa61a3c5ef51c260dd24cb9e3e733f946d15141147ea2a2db69b134c6062c60a3ae6bd136e2c044e4217639d8546924158de8d5b3b29c2715d","ssdeep":"","tlshash":"3dd052921e96a29aec3ac00102e00a0bc330235f8018846bbb310b882f37402e9c26d9","first_seen":"2025-04-18T14:37:21.885425Z","last_seen":"2026-06-08T06:12:46.116586Z","times_seen":1586,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/js/script.js","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"67dac0f5-27a\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2lzg44lD9vScD7uuNvrbLysJlh0QwhzaL1ucLoWzNmgjdFNLC%2F7rvS%2FbkVwLRf8XfJ1RtUVz7Ig2EtB1drO01BV7wKzYSz4BnBV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a16acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (353), with CRLF line terminators","md5":"648dad0bd5676ff30c28b1a10512f60b","sha1":"51a1260ed68d32bce390633e273f650b90d50060","sha256":"287a6d8fa4e613603fd2b8b072a026732697119845810c787b5d3507537050fa","sha512":"48666633b3d64b105ad1361b58c6392e5ae104c3f8cdfb2563300e1f629dc1d347e4a9de8e140300787fc144abf45585ce7b06618093ace56bec2e847aeeda56","ssdeep":"","tlshash":"35f049eac0744b7145165383d465627cf89604a99989a47ae238da811c00667b9e378d","first_seen":"2025-08-01T23:24:52.33555Z","last_seen":"2026-03-27T16:21:32.542831Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/avatar-1.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/avatar-1.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 24688\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-6070\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N58rIbUdYGk2szxQCFMxouULBlitD0BhNLn1zifwM7E7MBWS0fodJ9WaVIw0Ao%2FhE9uuVdSipdZE6W2rND96Ame6iuidgAd7zSeV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac412a1facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24688,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x337, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7affcd8e871cfd16ba6a5a2fa7d44383","sha1":"e2a19b4507665357c17bd7ca91dc14d24cebd95b","sha256":"f4254f300f68c774189b64c83520ce942345dd9a44f78f5cbfb6d53ef9ae984a","sha512":"d099fadc509f8a32958420c4edc3b37144f413367b91c555835feaad23cf6eebca6f3c8aecd236cb0bed9b8d0ec039f5c32c905c96d66ab6515336c339ad06bf","ssdeep":"768:iaKxP2xpZzJaPBue7hzM0hruBQiCilHV8Y:EP2Lh0JueFd3I3","tlshash":"93b2e100c5f6052d1c83fe8e8518f0d69653913cf6a1d6b2569c544beac1bce21e22f9","first_seen":"2025-08-01T23:24:52.381721Z","last_seen":"2026-03-27T16:21:32.562435Z","times_seen":11,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/avatar-3.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/avatar-3.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 9794\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-2642\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2%2FXyekG%2FC8VmLcMeiWUjjY0jt4SI3%2F5utgn05pmwjvaOHDTrtDiX2TE4zXDU%2BgW9l8JNiJBu3i3QIzSmdQ5i%2FO%2FAVVHfjNpuMJS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac412a21acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9794,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 258x195, components 3","md5":"400accad340cbe68bb5924f7e5ac3b87","sha1":"597eed6dc3e182394b1948d8c37ea7eda7bfddd3","sha256":"c751a926f87b29c440b9250ff7114d41e1c010576bf34d557aa1d0550899dcd9","sha512":"97c76b994852b6d6a764f34484b38993c73f2043d81b91410aee2a1f14357f80ecaaff64b88bdb72391375abcac8f2825d0edf7868750507e748bd8a75d61664","ssdeep":"192:6hkn3sBE+SrbEk6mHw/8RFPnqIl4KalMDNwDwxOIlIbJV:Wkn3sBE+Abf60n6KKMDNwDw0/","tlshash":"3312b03a8f8b9120d626f33b88bd530bd2d26452cdc736520c9f2b264f995927d9cc18","first_seen":"2025-08-01T23:24:52.358162Z","last_seen":"2026-03-27T16:21:32.563989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/logo.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4984\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-1378\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGvK1Yf%2BXyZPTYFw3%2BvcviNW6sUglLG9OUIPR326RWAyahfHaOx1nMkYXj65yyImLA7OdRzmGfhq4SFD%2BycgkK5nJvnx7l4QqEPm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a18acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 33, 8-bit/color RGBA, non-interlaced","md5":"385b4f6524767964a7dba558c54b568e","sha1":"ba496b1e6d5e3785c890125d5aaebbb1d4b34bff","sha256":"f24319f989cf757544a51dfaccc8ed791f02dc541cff496082e0c207f83313fd","sha512":"f5869559b7567f0d621028db363df7425673e806c53e9945c57cabc2a8ecf3826e7f92614869a587c6c631f5e54bf7f675c3c4ea467ab5913d205340ffed0a77","ssdeep":"96:WzS2iPNO4rPVo4Njkot217W6KDI69k064E9qyR9wv6l0v7HS2kMg8sm2WRkS:WzS2AO2VjKKPkx4iQv7S2Q3WRkS","tlshash":"43a17dc236b199291a9ca1d65197736bca05efef06c0e40a6ca5263c5e2592c6c881f7","first_seen":"2025-08-01T23:24:52.349394Z","last_seen":"2026-03-27T16:21:32.543989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/icon-3.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/icon-3.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 810\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-32a\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGxD90DF96Kbo5y%2B1%2FPGmma535Dk9kN53JV4wnruk7SlyZoLSvvjxn8Gntc2qJPd%2BUd1Sq4S5gx4L3Hg9I7GXk6kQ2bNJL9sIKD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a1cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"c5eb979c86ad8c8c2e8b1d71a642fb0b","sha1":"03b6b63f338436e0fffca946d34ae7097509caab","sha256":"6e1bf5db7ee7a2a4ac5e31b8edcbc2add2695c6672afb7d895343d3b9e70952b","sha512":"4ddd4b82819f424fca19b2cb32de03683b5eea3dc2a4bb0fbea0bf6eeaeaad4f93e6b0a8b742037cfcf031e8560b58470586b922caa152f22a06124ac99c0a51","ssdeep":"","tlshash":"c60186c207db2619c4630ef3114b1ae9bb95212b72042610da46b5dba6298d1eee1e61","first_seen":"2025-08-01T23:24:52.353953Z","last_seen":"2026-03-27T16:21:32.551222Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/icon-4.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/icon-4.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 686\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-2ae\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Gc5xkSr3P9FhAE4suCwz%2BWcvoj5Z2Y11Ejjp2icW%2FU2b%2Fp6KSkIxeR7ZgBHn7rHz9nF%2B%2FviVQ1%2BOwPmj6dDpJKevzIel07MvAla\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a1eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"c6277887566a5d8458df308a21cf2c83","sha1":"0055040f09e79a5699e4e6ece9f5a9f45ccf4f64","sha256":"229becaa3369fb42ccd2afdf45fce8a244f39beace25c8d2f7c4f263abaaa5eb","sha512":"4d61027b38dec8b4383e11b1282f94694dab3380d0049d1be4f1c2a13bf790fdf1f0ce9a0af2e4034ed1eeb171ccdf84bbb3fb744fcaf907c338e40a22471c79","ssdeep":"","tlshash":"8d014ece20649591e653eb6ec2ac407cca2d109b2900bb3aac61c026ec80dcc411eb56","first_seen":"2025-08-01T23:24:52.373834Z","last_seen":"2026-03-27T16:21:32.563053Z","times_seen":17,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Roboto+Flex:opsz,wght@8..144,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Mar 2026 19:19:46 GMT\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8422,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"875470e0fc6f1e546c5f0a9aa08c22ef","sha1":"1d7d950ee56c73ea6013c5e38286d527304c2a14","sha256":"259331f7112775651ff4e838aa47d86dbc75be882e14f68978097f35ee9c40b7","sha512":"ec10f41244490e5ffec94574bdb9921e1d450e1dee44cf3166dcea4eeead8ea233bf6bb72965e9e4f65970777d5a1f752952e1c5b63d613f55c4e0e31b82232e","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHFNHALNHwNHI3QNHxNHK5NH+:vtfcHjg8ciIbgxemeHUe","tlshash":"a002efe2146f9144bb831cd267cf7e32ad8e61126092d0796bfd1dd99cebd22026478d","first_seen":"2025-10-01T16:33:31.039205Z","last_seen":"2026-06-08T06:12:46.140302Z","times_seen":1562,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":104,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/robotoflex/v30/NaNNepOXO_NexZs0b5QrzlOHb8wCikXpYqmZsWI-__OGbt8jZktqc2V3Zs0KvDLdBP8SBZtOs2IifRuUZQMsPJtUsR4DEK6cULNeUx9XgTnH37Ha_FIAp4Fm0PP1hw45DntW2x0wZGzhPmr1YNMYKYn9_1IQXGwJAiUJVUMdN5YUW4O8HtSoXjC79QRyaLshNDUf3e0O-gn5rrZCu20YNau4OPE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bujj163.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 01:03:18 GMT\r\nexpires: Mon, 08 Mar 2027 01:03:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:41:59 GMT\r\ncontent-type: font/woff2\r\nage: 238588\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84304, version 1.0","md5":"29c5829e6a5bb1b7e04b834f09dc7cb8","sha1":"1f596e008cba8ced5dcb71a91ccf92d697c8620d","sha256":"e97ca92cebcf4df3539f6514cd652a84a827939e6d5eaf5edece6d83c8229138","sha512":"549c8ce6b02e89651228190e4ee8de86c7c259fbc61d3b327a09f43f6a6a73be98e4998880fa939474ea55fee34cbabe9e41e601510d0b6a093289a95ed714c7","ssdeep":"1536:j9oKbqG8ZLr8xR4vLxxeXPHQmp91WNK8Vrn/QB/7rj3xCurL6g5XXXS6w5aohuPG:jGKXWn8x+dx8tp9I/n4BL3xpL6gFHrwp","tlshash":"1e83126cb8d1605a8f9038b1f17448f92381240cf1617b2b5fd46b46428b9e39fba7d6","first_seen":"2025-01-21T02:45:33.944465Z","last_seen":"2026-06-08T09:33:30.759214Z","times_seen":3460,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":99,"dns":1,"connect":8,"send":0,"wait":9,"receive":16,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/favicon.ico","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZ%2BjeUHewL3WxbQswhW%2BhczFC%2FoDu%2Bb%2BIEN%2BZDkfO4UeGlH3Zxe7yNUuJcNkqefvAd5LgNJoQm3wiD1ZrWyUJ7nfUh2lzyxFDvH5\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"2fe-630b1aad4a47e\"\r\ncf-ray: 9da4ac445a9bacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 16 colors, 4 bits/pixel","md5":"97ef7d5696249e88c28b863aca72cde1","sha1":"9a7da972dae1890c5ebc5db9668002c3158f217c","sha256":"d91513e235b18850a477a48cac87e2732711b3b6aad1c1a9fd785a914c85b2f9","sha512":"c1b408a003411529d4fb5092faadf2eb1fffd805e52535656c0cc929b4d1ef4a5b2b2849a5bc4033fb2e1cbd3a2defea0665aad82525481c87aa2043fb267649","ssdeep":"","tlshash":"670112811207cba8fd274537070a4fc196c55c5b855177cdc94004b41d35b3d4d9c873","first_seen":"2025-08-01T23:24:52.386195Z","last_seen":"2026-03-27T16:21:32.540756Z","times_seen":11,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T19:19:45.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 19:19:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fVnbTe1adVpHPSggBOp3xIi1tiQWTn9dqSMD9CkApNfMB9Cp18FAcmXTLVAQnpzMYRHduXnD6rva1ozNWYQBWH%2FLZcwf%2BCK6BYQz\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9da4ac3f38595621-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18147,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (336), with CRLF line terminators","md5":"ef3ec0a47e2f050816d4d315cd362a53","sha1":"0f017cbbbc5bf78ad969d8bd2b436d5f0403cadb","sha256":"71bb0129e08c9a4de40c679007a044263d720a3afb6ca8c14fea63ced847bf64","sha512":"82584bf5226c7620adad07b4c40485c9fbf2cf90355e255dbe30f7e8765c4b25dc4f85286803d3dbb06f61beda20388947e516c9dde4f3eafc6c345d98ba8b16","ssdeep":"192:eROroIyL/DFhu6NLC9nGpmrrh2wpuwS7ZtUPuG1KbXDN:XMrUgwF2wpulVGsN","tlshash":"6f82502265c07a334133c2e6eb667ba1fea69093d3004114b0fda3ab1fb5d48c9375ad","first_seen":"2025-08-01T23:24:52.36583Z","last_seen":"2026-03-27T16:21:32.557765Z","times_seen":11,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":44,"dns":1,"connect":10,"send":0,"wait":83,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9da4ac413ac50daa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1657535\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 10 Mar 2027 19:19:46 GMT\r\nlast-modified: Fri, 30 Jan 2026 17:33:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01KG7ZENXCTY1A38A3KMZZY6R0-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-06-08T09:57:12.847326Z","times_seen":38247,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/hero/person.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/hero/person.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 473655\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-73a37\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfCd4Q%2BleYZABSrDrKExsEnwIoYmSn0TShtDoJPJr%2BgvlU0B6T5qmpDuiDuPm1uEf7Sx4di6KlmvKygX8fCC72%2Fnh%2F%2B%2FzjSwSb4C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a1aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":473655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 578 x 526, 8-bit/color RGBA, non-interlaced","md5":"4ba2b53f7c75508630e5931cb02126d6","sha1":"a88143c90ff3c0a37e564886bbf2ee3472147d28","sha256":"1c3a030ba8ec7c474d61a2b7c6bb0995bb0d3a32ce2ee41dcc09905edf3b3588","sha512":"63fa89616e34fd8401da1529f08bdb5005b2cd83f62afc4e60b3140f8a6d1fe4f5b1bd4e8369542de5be4c671a4d8a3964e025d20e95171f986c23da75f69ed7","ssdeep":"12288:UjNt+jg6Dcmc5DHvrg9VJI7tOtHMAk7Jn:a36Ib5DTsnI7LR","tlshash":"f2a423a2b649a368d61a7b2fc9cc6ba1d28c7200de1e5c447f12351775bbe0de984d2c","first_seen":"2025-08-01T23:24:52.344937Z","last_seen":"2026-03-27T16:21:32.561606Z","times_seen":11,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/icon-1.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/icon-1.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 710\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-2c6\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGaU6BR7FLeB65u4%2B6KZswjGV4GbO8T%2FjFzEhf4UNXlYaZ3ZYZLC4774rNSXy4vij96fJd7wjVCZwUphoCErCdt0OUSrV8jfFlZe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac411a19acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"144d3022279910f719f6798ce953c7a7","sha1":"6fb0e60cf1fa2bfff58abd7f7bdd74c597fdce68","sha256":"d88131bb8546dfe8e5c6e6b60336ef0d2b2af499483466d9be4aee7189d1cca8","sha512":"7d8e1c588fdcb746fcc58072f5a36c1254e5495fe5a94e3a2594b9919a9661a558371dec61502e97896ce06226ee2bbc12f54577d98137802c6f881af9527084","ssdeep":"","tlshash":"5501e983710e78fab824c97e1f41184323739040793448b1348000e4145fc8c73537f6","first_seen":"2025-08-01T23:24:52.377744Z","last_seen":"2026-03-27T16:21:32.539453Z","times_seen":17,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bujj163.com/img/reviews/avatar-2.png","fqdn":"bujj163.com","domain":"bujj163.com","tld":"com"},"ip":{"addr":"104.21.74.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bujj163.com/","date":"2026-03-10T19:19:46.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bujj163.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 22:06:05 GMT","end":"Sun, 07 Jun 2026 23:04:50 GMT"},"fingerprint":{"sha1":"0A:13:87:94:D6:E1:A7:FD:7B:D2:71:F1:BA:95:00:01:C6:FC:2D:F7","sha256":"98:8C:FB:F3:AD:38:E7:A8:AC:21:7C:04:D9:6E:CC:2F:5A:23:5A:BC:88:28:CD:81:A1:E2:76:A0:FE:7E:65:0C"}}},"request":{"raw":"GET /img/reviews/avatar-2.png HTTP/1.1\r\nHost: bujj163.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bujj163.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Mar 2026 19:19:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4326\r\nlast-modified: Wed, 19 Mar 2025 13:04:53 GMT\r\npriority: u=4,i=?0\r\netag: \"67dac0f5-10e6\"\r\nexpires: Wed, 11 Mar 2026 19:18:19 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOSybWPNncUskdOjT6Qm8QoAnBIQJxT51lYQc01rozik829uvrQayA4lFZ7PR4wFVbzaD5HgdRdCQtkqdr6x51iWtq0F%2BNxx9uDg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9da4ac412a20acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4326,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3","md5":"93e2a4cd8974a80e313d9ccafd405353","sha1":"69b13f4d5a03cbea7675f78b999b44b452a340f8","sha256":"aa01bcf4452019a46695440c3d268fb5fd790ced951392ecd52ceb0d66695123","sha512":"5c02fcbe2e5727e5b9f232438704cb9e214386a1b40832e368f74130e555465b3f45bc8004b494cb126b58f1489a9dfba836f4108f8180fdde9f0c3c03ca9f6b","ssdeep":"96:bOGHEULAtKTC1D2wuHr1CV4ncLjHJE4fy0:bOGHvAtp1ir1CV4ncLzJl9","tlshash":"48916caeddb98014c653ae3e15986b04cab86d58b57b846783b90606c33c2f11c4fe03","first_seen":"2025-08-01T23:24:52.340283Z","last_seen":"2026-03-27T16:21:32.552204Z","times_seen":11,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"bujj163.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}