{"report_id":"9189edb9-8d9e-4582-b9e1-6dc9c0484bae","version":6,"status":"done","tags":[],"date":"2026-03-04T23:06:57Z","url":{"schema":"http","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"title":"k8凯发登录-台州k8凯发登录集团有限公司欢迎您","dom":{"size":13301,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8bbc5d01fecf63f5388b755f90123a72","sha1":"2ddbfeacfa6dd4eafe0cd0b946d37b8edae0b001","sha256":"e1de8470ac1b8dee9990dc332d7417078d7e707b82647e9fbf5fea25d4f42c03","sha512":"1345b5fa52804ae9a5ffef3ab911f0d3ae704167b793ea86addb488d8e8607d6c6d66a571835c59a80485a62ac8fd8f4fc22e67e4fa1b4021f5fb158902583e6","ssdeep":"384:yPG5LSC0uk6VtHlMDI0pukpq3TOczwnBU8/:fL8uk2dlMDI0p/pyTOczG/","tlshash":"c252a7b152e229237213c0f62ba6b70f71b2e907d426d544bbdc06f18fd2de79997208","dom_hash":"domhashff6bb80dc1a990223036379b88e34d2e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T23:06:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.qidianzhuangshi.com","ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-28","domain_rank":0,"first_seen":"2026-03-04T23:06:58.659643Z","last_seen":"2026-03-04T23:06:58.659643Z","alert_count":46,"request_count":46,"received_data":2313846,"sent_data":25031,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"analytics.81z.net","ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-11-09","domain_rank":0,"first_seen":"2025-08-17T17:38:11.527861Z","last_seen":"2026-03-01T07:56:30.356954Z","alert_count":0,"request_count":4,"received_data":138958,"sent_data":2791,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-includes/js/bootstrap.js?v=5","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d3036e330382079747656390f9640e","sha1":"f1fc023639c895c8ed8c1033b905794f83b846b8","sha256":"dae524a1de3df2f52578c2c067d96590c5b8052e724965ddedff0b6a671ff03c","sha512":"b1143da15bbc413fdddd0dd0bd1ea0fa8b01c179d1c194f94e668f7822508706af2dbe2c9f4ebbbff940153092bb57995a3cbac284f4265c2b435aa6f765cab8","ssdeep":"","tlshash":"1a514f6972f32131c167a02a17bfc609703640076105cd097a4c8aa9afa8d3b9af2fdc","size":2739,"data":"","first_seen":"2026-01-28T10:40:22.434878Z","last_seen":"2026-04-04T13:42:54.637287Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32ae72f1710ec9c51cc45c026d96efa3","sha1":"947bb782bae76f23c8298a0f1dc5b7a9283dac63","sha256":"fe6351635718da748aa9aebdef89d0ff505b603117819b96cf137cb5cde2ab5a","sha512":"5481d019b6b5b98524716c801b14087db965634f37882272e37aed3d7638a403fc818108a76c9f0b5bdbe5c3e9ee35d9e67a0e6d5ef7ab7771cbecdd264fd61c","ssdeep":"","tlshash":"d9f0ac2508ef2dbd6137623e3dbe995db3fb281a60a1c0547e84d4165d61981869068c","size":589,"data":"","first_seen":"2026-01-29T13:17:32.594115Z","last_seen":"2026-03-30T01:18:24.55792Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-includes/js/html5.js","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef9a90e18b0df0c55fd1e601fb5e86d0","sha1":"a494975eb4f261770ce3815a9c6c03214619b71d","sha256":"c96c91af172b8132ec7ff02b36122a2d1cfcdda2befc4e03bc59718b901dad96","sha512":"7ee73f241f07b1e0dc2c6ce910158d7119020a71c9228a3811f7cfcc85332df12eb242f9d04b5e861342fb9c57a9ac87e8b2f3e6706aef1640135cf47325e0d9","ssdeep":"","tlshash":"e741953a896711345aa711aba7ef57043873c247470adf503cacd2111fbcd12299abf8","size":2359,"data":"","first_seen":"2026-01-28T10:40:22.402378Z","last_seen":"2026-04-04T13:42:54.657678Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8379c39e24116a585d60ba93fa9b3c67","sha1":"18c7ca4126827c81a79cc8aebf5010c1c8b8db13","sha256":"b64ae4849263957da65551956284be6aace77efd986ccd6fb953d121d4213ed8","sha512":"a5aacf8de6843b6c93313d05ecaa97eeeabb95e565befb01bb5315cf70379190521c68df0472cdb68bfe7c0350df53577929f85d96c5b4614f56ace686572a6b","ssdeep":"","tlshash":"fff0ab32823ff428cf73d166f0d04b882a38c24de7a28f15ab706932a5dcc182c556ec","size":444,"data":"","first_seen":"2026-03-04T23:07:04.147376Z","last_seen":"2026-03-04T23:07:04.147376Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T13:49:40.769016Z","times_seen":292179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac151bc02e1061e3eeb3dd5fddaaf8b1","sha1":"94c5c2c8f1c7770b61841c479b2819a8cf19b6b3","sha256":"84dedfe6401581dc0def31a3ef39d719409a5a6edf5d0ff530c5ed116d25af93","sha512":"d6827503f811c50b3aa77ad654dc9b93cd37e87f48c16ff7aefd5a7bea227779931a9a697a1d760e96ee7e857f8101607ceecb34f714416620e31344c579edf3","ssdeep":"","tlshash":"11f0ac2508af2dbd6137623e3dbe995db3fb281a60a1c0547e84d4165d61981869068c","size":590,"data":"","first_seen":"2026-01-01T06:49:01.500581Z","last_seen":"2026-03-30T01:18:24.557084Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.js","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-04-04T12:53:57.513813Z","times_seen":13911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.js","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-04-04T12:53:57.513813Z","times_seen":13911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"1daca2aea5230670cf5b41dd0df286e6","sha1":"3852ddce2c2d9a2bf747b2d7ca5ae873176e1a5b","sha256":"c4c22dbc92f3a61c2220fb771a4aa92abb06992751959b6b6ff141995f703bd0","sha512":"ca2bad41d6cb282902416cfcf4896efc13d419e8c90c07f140840c5aa46bafa2d1604ce8fef240b092e5f9be5cdbe72cb8816c8552ff8127f1310dfc483821a6","ssdeep":"","tlshash":"aee0ab32823ef428ce73d156f0d00b482638824de7628f15ab706532a59cc1828512ec","size":425,"data":"","first_seen":"2026-03-04T23:07:04.149831Z","last_seen":"2026-03-04T23:07:04.149831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/PDNMKNpnTy0WNOx.css","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /PDNMKNpnTy0WNOx.css HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cI5k5EzzgSfnp%2Bj1VKj1Mz8FEoej0lqhaEXExrnsPbjOyLoLHeBxb5ORHs%2FlUQwSxeHPs54ZfR%2BXygphSAyaX8QBKEuZrF9FJkwIFloEE4upVpL7eCLh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc87d2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32882,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3329), with CRLF line terminators","md5":"4a6f0fcba32703087dff1934d0c93c34","sha1":"e2487bd7e2178c7f5048a013c1bfeef2222d117c","sha256":"28ab2fabfe93ee8fdf6c1710c8fe1335a458f5bc2db00da66b4a9306a3ee0c98","sha512":"6c09accf4746d95397301f86b9a61fb1603a2b62937e32aeb8820667e6f6c0008e8627a960e2a1c5199714c54c1c2569b0bbb42cd32aae0d51928ff844837481","ssdeep":"768:SbdgbakWmIt8NvQgvTqpNfYX6X5UJUDdJnmME+V0HGBvL7kW2GJcAJqjeXJO//1B:JvTqpNN0mhkZz","tlshash":"fae26365a523314de7177f89e3f51b399d385073aa0b04afb3d6284f83c4a6c11a728e","first_seen":"2024-08-19T18:50:37.408884Z","last_seen":"2026-03-04T23:07:04.065513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/PDNMKOxURk8CKDxNTD.css","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /PDNMKOxURk8CKDxNTD.css HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbVt76OAWghwjdngqmJV3HkWsWCQMqGuA%2F4iQkJJ73IvleJWq01e0QgFi40HzZZwk7WqjpGdBRuuBbf1yDuWLowFeXIapo%2BwUvocWuxLOlAuFOAgQKxV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8802efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8766,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"faf0c2afda8c12198cadb67864076bfd","sha1":"7dded5a6b1c96ccf4e7c73b16ac12b2e6f732796","sha256":"6ef2b3d60e785471783a9b13780e8a7bcf6db8398398c641322f67a121b65a8f","sha512":"382c95dbe800fcd75aa67540d70ded359f69ae174b36d45090db6b0fac075317b98edb87b93ee532398cfaebdceccef629ccd21c4ae10ecf9cf67e7471ce8211","ssdeep":"96:i+k8krKu104N1VPBTZBWMYH0umoqeI4qNAxVRG9j7fbxhZ6FIoT1Ei6AQAjgQZnI:uxNzejm5JijsOrVC6oMpKIxFYCMvM5k","tlshash":"6802dffc987d01805b20daa1a3526962bf1d92b4df833d5bf217698cb7db6105182efc","first_seen":"2026-03-01T03:18:18.573913Z","last_seen":"2026-03-04T23:07:04.068677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEE8SSNIqTu0A.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEE8SSNIqTu0A.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FX%2BmVYw8Zkehqu0qCa9CX4gzqy%2FZzsIInq%2B%2Ft3nDfnLNBCdsAF5XNX9DyQU3GdyN3FIvdO2sdpgsjrIYiChUmLfVTOhp39xcdeYyhjpP3xYAO9BezZeq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8822efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 100, 8-bit/color RGBA, non-interlaced","md5":"4e9fcb3070d7e961a34216b6b8bbbe24","sha1":"f78b6449b9f4d11ab87a08d7fa5309b606b5176f","sha256":"a3a7b213870b099f34a0d202f1f39f95e69958fddacd8c5e307fa7795789e40c","sha512":"05531daed44a41bb0d08a409666178fe79043d45ea7597dffc93a36164a2bf6a26db9cfc034f027b1964f7c3d4279d695cc4c2781ae79623de797fad7b8f0e40","ssdeep":"384:PN6ka5Ba1VI1I9MMz7pVeM+g35kKqD/TMixsKDbEKh:F6KnVeMl5kKqD/T3xtDn","tlshash":"7ae27c34faf2b6284995a33a299934424c230fc3d2e2ac497dde5d195f61fef8c4b254","first_seen":"2026-03-01T03:18:18.59666Z","last_seen":"2026-03-04T23:07:04.072452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRAoDSWOHxOoDyWSAHWRTEbH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRAoDSWOHxOoDyWSAHWRTEbH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmRmcNUEdPQ93Tjx4S1XKwpHCmYDFfeJhT7P74LKEEjKfHR7b7ig8TXmgALFujh%2FkCsw4akqp5EN2aeYhhEuVaMdVaXwxvfR6th4HDFeV%2FygxaSSQLyz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8882efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95059,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"a57c54e400b542bdd8f11b79a22a5a0d","sha1":"57e1860df27eac1305e3fe833ab5da88d4848723","sha256":"2e10ab6bc9638e96b5a50539236c6e760f9797dc479c07dc5dd4f1b65bc118db","sha512":"70469f2d6c7466c80ac8271bc345655ff2c2ac575e021ccf0b33e9714b06237dc3d16307e39c99e5c7d781692ee8c6cb4777b92c22da3e506f40fe47c2cdf37c","ssdeep":"1536:e6ahmEYS4De3ogqOvm64rm6ZgX3ooxriTViTcFP2Px0Vp/QAkYsRJuhWYj1:Ov26cm+gX4Or+9FOPx0Vp4Vk1","tlshash":"0793126b20d48d7cb4cf9363999a922d1b0e082913058a939cd78f68850d94fdbc5bfb","first_seen":"2026-03-01T03:18:18.589279Z","last_seen":"2026-03-04T23:07:04.076285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgsEIuOK0qFEyuREOxnSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgsEIuOK0qFEyuREOxnSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhjZB17kRWg3UPAQqxNnVtJEP4p%2BhlgB4%2Bwn2PYTxEMwK6ZRJaLS%2FYNRrEFZR%2FFjUX2pkBgTvTZWpfjCnB7UUqJxZsLvbYLHiqbL5j8gXKMFcQM9Zbfp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fe89c2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12855,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 200 x 41, 8-bit/color RGBA, non-interlaced","md5":"83f5e972a3c97302763e83a4970e617d","sha1":"2c6c376e916ffd9954a01a61aa99ab500f7b83c3","sha256":"7acdc85b81c2541d746c64f18aab2bc8ede7a7b0dbfb92a157337cc43c957876","sha512":"f8e3532caa51ebb49cbaa1ef5a1e7196ddf5548de82d606b748f1780a8090fcc781c6f97a69af1a72cf4afcbead6d94c014dd780ad2c35ddd265e0a370399d0a","ssdeep":"384:mdC22Nxffla4ArdnWIKt7ETlPBxXY7ws0KGmLT:mo2YzArdWX7EdXXYknhmv","tlshash":"f042d0d8b5e8308a188c47c147778531bb7e5e1fe5e7d6d8e8327e8630745a0ce22c91","first_seen":"2026-03-01T03:18:18.492277Z","last_seen":"2026-03-04T23:07:04.07928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgFDIWYJ0MrEScPEOxnSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgFDIWYJ0MrEScPEOxnSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mjnwzslrg99U6lziHpkpMsidOG9%2BPcY09dXeH%2FVoa2ZYMe0gpAcjDUOeamY6dupJZ7%2BgpG2CgD63bywi6tZFtCC3j36os%2BhBp6gZeOFlbJudSmeFsyp%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fe89f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22854,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 200 x 102, 8-bit/color RGBA, non-interlaced","md5":"07a74cf2c3bd8dfbd2c0851a76d4658b","sha1":"de07b26f5e53c09235b9587dbd5cf517e14d3f61","sha256":"9fad009ace48c548b6eba4a25b0b0194c37342c612d93544dc181c4c1a4a3f6f","sha512":"d10ef5d3d2ca199430df57d430410cfc3d0336a164f18cd9c77e8b5955c2080b1e141e27fd850dafdf041e18837b78b13afcf516dbe1b46c46b90f429e1a46cf","ssdeep":"384:OkSGSOOEuwuruoljjnuajHunphV3A8YQtBUFgiXCCdV0BxIwS9wFYclk:OkSBO/5oRjrzI/VQ8fHUmiXCS0BfbFYP","tlshash":"88a2f222935590f54ecbbb9093f410445a3e3c2dbcb69827b440f910599eefe309559d","first_seen":"2026-03-01T03:18:18.592085Z","last_seen":"2026-03-04T23:07:04.082214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEEbWUNENENZRSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEEbWUNENENZRSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cw7xHXyOpd1oIGhXPXqP%2Bb510G%2FzKS6Oi8pjBy9BxMGqtpynx0EUipl3WhyWV9ineryvit4oC4LpR4IpOybXhfqZ44zVG07fafWpF3DI74YdAj5PJTAB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844f9802efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"f67b90fef198da90ed71c01aca340841","sha1":"d0458af36a484b425df23a67407777e40004f249","sha256":"0cd4c02441c2c641fc27bcaad0e6fa8f65ab4c60771824f016cb9e8733e13933","sha512":"06e9be13234d75b28413728d08f66ad7fa63ca86b839a1070b5f02da7a76d59a8f94f48c5b6bde06b5b03c8ae92c409866c7706905446b4d31c887fa9999d5c3","ssdeep":"192:0SZ9k6lye5BC3hGuu6lvC7aRD/2zqC1wra3xMYR1Iq:zo635BC3hGutlv+y/2qC1N","tlshash":"b3a22a58fef2b3a91804a23629e524415d3306c3eac26c8a79ce8d0d6f21f9d8c4f652","first_seen":"2025-05-31T11:58:00.924551Z","last_seen":"2026-03-04T23:07:04.084736Z","times_seen":5,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-content/uploads/vip/k8.ico","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-content/uploads/vip/k8.ico HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/x-icon\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 28 Jan 2026 08:22:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6979c759-3c2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mgq5on67E6c7PJKXrmENbpfkd5KmWtGWFRS9h7Mr9PIKR4ypF9HRECQtvEWaQMN1ot1cw1GX9jw9GNkRr%2FsPW5EJyBkhWS06Sgv1tRX9bK4%2BgUDK9eaQ\"}]}\r\ncf-ray: 9d74884629c32efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cc215d201e98797460d08293f15eec11","sha1":"9b18e4e12bc749aedc6ee1087d33c7922a0ec8b7","sha256":"b95a79db35061449bc017376f335550f1ee5a76aa3207f76fddb23a9d60d23a3","sha512":"6bc01398bbf192e381abbaf28184bf6fe814691bfa3513e57d3d51664c65b4dee02c3b4287ac94b785e3e006cebe04048921325811f070f8c4c3ac21cd8db9f5","ssdeep":"192:Uc2ZvvaaVVw0o8WmLYcnSDAu3ioo8DoW1Tn/EUb9R29iKBmXSLFz/ZbvGxna7Nsb:UAYpNLYcSDAybJzAUb9R2FLFz/xGB","tlshash":"eb6282816768cebac2632a727066b27f06791f4d3adf85844a717ce3f8d00862f359d5","first_seen":"2024-12-27T21:49:37.954336Z","last_seen":"2026-04-04T13:42:54.621227Z","times_seen":1916,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRALEIgQJxcFFyuQAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRALEIgQJxcFFyuQAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bdk%2BRDlzdSO%2FEBDe%2Bb5xMVrJ0qKFz5fjxvPmb8EV%2BwRj4pOIcXHjsImyWzYYKKx5hN4nDFF8afuPZoLSZmeCb4EkBWGhBwRX9gOFzSjnJak9xTlS94Yh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8892efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95242,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 226 x 300, 8-bit/color RGBA, non-interlaced","md5":"88cb5526444e6e15a4678f044a670d23","sha1":"c4b9724e970c15e4d105054021722a6487842a19","sha256":"9897c14967e2d0e767debb29da5d7a8d025934cf8940940e9addbfd8b025fa61","sha512":"6a9b7ab659897746face8984eb3cb5f9f43e6ed3827e10b0952928d6860cd4c842d3ea37d8daef97f2212c44ae7d59836f05952cc5934384e585ffa4602604e0","ssdeep":"1536:t/t5ek+kN50YzIvUhIwik4+UIrlqd/7dqNDqE+T9Yo4sj91zciXKbYfpMkQSyCor:tae50ICkr4d/7o9aRYo2iXimk","tlshash":"b99312e7bc6cc548447de1a0cdafaa5db5269d2fca68041929dc7cf61ee1f00142e9e3","first_seen":"2026-03-01T03:18:18.474452Z","last_seen":"2026-03-04T23:07:04.088327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDyyTHxWrD1kQJxMqF1cUAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDyyTHxWrD1kQJxMqF1cUAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65XE7yDXXeseukgtsQdtqMADfy1iczhj3J2F3r7zgkxPuw14G2u0ZLSDI9fTZBWMTLNQnkajBaXDc4zC49jN5Fpvnu0mIDXj6MUOOG6nPAcYcJX9l6Tp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8932efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79070,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 211 x 300, 8-bit/color RGBA, non-interlaced","md5":"d9983768bd24b35f5c782c3daf0881d0","sha1":"93bcbe6253b50f919e238be1fab0d71d88ac18d3","sha256":"6170e8675d5754923f9baf2e4cfc3640805df63c58b47e432c235607a7b65328","sha512":"3b2b864c11cc15489cee3926d509b612d41cff6ceb41fcd4db12ab60a7f2225f9e57ead67c3b55cfe0dd3b971a588f2747f68feeac871581120d0baebd8b1359","ssdeep":"1536:7wTsR9DY7NzjUF6eTH4TyAtwSZtXnXpcerhM73VeE/anK9gy7BaYPm:7tR5ENfUjTHSbWSr3qerIVnWKyytFm","tlshash":"6e7312ec2d00535f2b6808ec66d6fea20e2ed1ae664e19c60d0495c89447ecee9d73dd","first_seen":"2026-03-01T03:18:18.53299Z","last_seen":"2026-03-04T23:07:04.090707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJ0OqE1uQKHIMDy1QAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJ0OqE1uQKHIMDy1QAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2TS6Bw%2FZPc9VW7XJwFRKsBoZHjF2aTiZSu%2Ff68pH01YNa0ZgyCkJPl5kQe8Bs6UQbkESBWaqgmMnSwBHIGm9dJyuEZFxY3zNctBrF8XN%2FRkPnp7FGD2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8982efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125530,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"16ba6cb941ad8f630444c5e4be6aefb3","sha1":"bca9c59da4d1ffaceb9edf28725946c000e60639","sha256":"868cd38dfa2001ffcc87d0ef589b318372290d9fc3cb26df5114a85bc30c90c4","sha512":"ce4d11ca0fc2847dbe56646d6755049da5bd8fc335a493a4d378da4decba2c5cb22978540e17ffb0619bd55501bc7b148d89df9e1f70a911664e5c80c47b0d6b","ssdeep":"1536:b+tIh90nJv5Ar3/bk8YqHTDiCekrfjk+b4pNtsQqYnqtDXC0+Mb6dopCv4ONn77:bjm5w3/bk8EtkrfYHptDMy3dopCv4Enf","tlshash":"f8c31282371925f5eebf0a2b87d9b7080338d18775295dccd497bc8fa39a4424b998d3","first_seen":"2026-03-01T03:18:18.579376Z","last_seen":"2026-03-04T23:07:04.093024Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":333,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-includes/js/bootstrap.js?v=5","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-includes/js/bootstrap.js?v=5 HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 28 Jan 2026 08:22:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6979c75a-ab3\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2Fd3tIoi9p8GCx4L37oksvTgSxItsRTWFSm3C%2FqZfy6NHYdekwSlJrzgKHwunCKSMv3wQid6EoYM280A7n%2FZGQU9v6qeIBrvcl2mLrEdHdQoVVoCCw4T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74884629c12efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b0d3036e330382079747656390f9640e","sha1":"f1fc023639c895c8ed8c1033b905794f83b846b8","sha256":"dae524a1de3df2f52578c2c067d96590c5b8052e724965ddedff0b6a671ff03c","sha512":"b1143da15bbc413fdddd0dd0bd1ea0fa8b01c179d1c194f94e668f7822508706af2dbe2c9f4ebbbff940153092bb57995a3cbac284f4265c2b435aa6f765cab8","ssdeep":"","tlshash":"1a514f6972f32131c167a02a17bfc609703640076105cd097a4c8aa9afa8d3b9af2fdc","first_seen":"2026-01-28T10:40:22.434878Z","last_seen":"2026-04-04T13:42:54.637287Z","times_seen":138,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-content/uploads/vip/k8-2.png","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-content/uploads/vip/k8-2.png HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; _pk_id.12.8065=341359bd5fda397e.1772665596.; _pk_ses.12.8065=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jan 2026 08:22:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6979c757-1351\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbaoC86ThszRRko8M9uQ2xEdmaNvjAqkrGRVemUkF8TLTGBndmJMMw1xd3b30RibBHv%2FZEs22Ory4%2BwvdDOki7JJy3lW0AmmdM%2F0MrXIr2UYEVueB9Fp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748846b9e62efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 202 x 202, 8-bit/color RGBA, non-interlaced","md5":"adcb29b9fd7f0b859db8007feae6624d","sha1":"f0dc484a10e5cac6b427306bbb5019e5202d6a17","sha256":"f4fb0d79a1d1654734786ee270912276985890bec0d8fb82c47ac4b3366f3091","sha512":"15ec215ce11d0a8fc8aa7dbaaf287aa3aa8619cf4993c724966748c32487899852eaa8129193c66fc5cc4d098b97b76689356ac66a30921f3ac54e7f7d48d464","ssdeep":"96:S9tc9BfbGEVT5B3AzhEQqYX0LhNe51fI9ZvkgNqN4bJ6F8u:+c9BfbG45B3ME7YX0LhNe5eLZ+ya9","tlshash":"f0a16f8bd4eb1c736d25d4e26814678dcec86350384cfd8e452734680df78cd9d669e0","first_seen":"2026-01-28T10:40:22.409398Z","last_seen":"2026-04-04T13:42:54.652592Z","times_seen":120,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":531,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-content/uploads/vip/k8-1.png","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-content/uploads/vip/k8-1.png HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; _pk_id.12.8065=341359bd5fda397e.1772665596.; _pk_ses.12.8065=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 28 Jan 2026 08:22:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6979c756-1289\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyzDEOcTwNMDhoXryMw1OL2O39a96NxRUHI29Tonz6RlriJpIbN6QyW1ytYxwgejduWv%2B3NHrkBv2uNFyN8RDA5vUF2NKKkaHiQ81WqTs77uUQF1iJ2y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748846b9e52efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 202 x 202, 8-bit/color RGBA, non-interlaced","md5":"50d86f9f8111d92147062e34f4472e20","sha1":"c3f402193fdeb146e416de502cd3145712f171bf","sha256":"d10f4bc2aa2473bfb0400629af6725bfb496ccb4007d41da99d40ff5fedcda83","sha512":"78176bcd5e659cc67e8e54e8c71d126c209c967322317cf47055ea4fff41d58bdb61a260c94672b566b8773b46aaaf254689d10fe121ae41a45dd95bebb69ef4","ssdeep":"96:yK4otb0WjWdj6HbgeLVSUw6p+kiG9KwDpXtM7X/uC22ZBapBL94:yK4otbZejwUexSUp3iwt4R22qrL94","tlshash":"d2a18da23c33e6794b679973649e15352e774798e2fc0f482625a090b971b0cbb905c3","first_seen":"2026-01-28T10:40:22.445309Z","last_seen":"2026-04-04T13:42:54.612609Z","times_seen":120,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/PDNMKOxRNjZCNHDrNk1RROxN.css","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /PDNMKOxRNjZCNHDrNk1RROxN.css HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhB78B1ubWbnrtuo4fZ6N%2BSOXnC3KkmngGHL%2F8y%2BsqqIfG%2F7oi9nmHu12AExMx5%2FS8d9JNrsYSEOjtF4isbjGHMnkJio4yuxzARFmoRb5BfrJiaVYDT7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8842efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14770,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14470)","md5":"39751e39b5745e0737044541e5e96bca","sha1":"16088778b90643355ab95cda89f722de9e115997","sha256":"f6b25f7684c966016d4967eee0a23f0feed6710f3fbac902fd7c6c6b0a7a481e","sha512":"599e5e568563c5d6ff543852a155deb0ca72822a7fca8c49de35c24f824470aecd419bbcfea3383007410689b4998e8ea9413ab3268449f0979b81f3b37822fa","ssdeep":"192:cx0rjafJWr7g5NVJVUyXyzSJrJB04yNb8kQb8ki:cxuuA7gNVJVUyXyzSJrLc","tlshash":"2b62643c16002057f6334f1982c9e7ac9715c8976e0368ef6610eb54cfba96a227f767","first_seen":"2026-03-01T03:18:18.486675Z","last_seen":"2026-03-04T23:07:04.10088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDycXHxEnESWXKxIrD1WRAHWRNjDH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDycXHxEnESWXKxIrD1WRAHWRNjDH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVO7qZWOdSYtxJN9NFUfNWkGzrcY4%2B7MdTY5paqssxIA%2BgOrrqCwTftuQsUf4PHK2ZSXtipgIf6F8Z3pWo%2BhQC%2B3r1FQRdkjFXGRgaGPKenNYnM2kAwP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc88b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 249, 8-bit/color RGBA, non-interlaced","md5":"42bf23c5b6ddfe0fa239073cfb4cfcfc","sha1":"8068cd07d7bd866902d779a518ab5a4894837e01","sha256":"7999a08ed0458710b0b04ad9b87ecd5db95e04a6ca03beff1b2c4069ff0d00a6","sha512":"12b9379959f37357bcfc4c0353fde01869f950b3b9d1c85880b3797a0ceb24d40071e95d6a1494b047b4d35a90e17c4b80a17f27e968090ceacfcc77327a9572","ssdeep":"3072:hieWfGWkGybiWGpuEKsGzvkCqd7uVO+GE7ZH7:tTGyHrscvDUqYnEFH7","tlshash":"acb312c042239001a292a325982f5a4da7c79b55ebf7340c375079913bbe6a3edb587e","first_seen":"2026-03-01T03:18:18.556756Z","last_seen":"2026-03-04T23:07:04.103272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROFES9PJROpEI9SKHEoDI5RAHWRNjDH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROFES9PJROpEI9SKHEoDI5RAHWRNjDH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8reOZN%2FYx0yjT1%2F4RtPx8GbQgi6AW%2ByKUXaYsfG4%2BCOcR6IoiwumIJXjJFgyg4AQVzPSfx0Bnd1SZ4CR3bJ%2FRsB7F%2Fe5PM9%2FbuMV%2FL7jvko3e3fe82Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8902efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 294, 8-bit/color RGBA, non-interlaced","md5":"c614244798a46a9a983f837edfac4a38","sha1":"9b6faed8d5ef9f17788e6ea872e6fa24c223edf7","sha256":"097feee50a2625b08b07a3a47d1b0d54c4cf343098805439aa8ea4d32d6603bc","sha512":"513adb381b97fc6dc30f38437bedeb20aa23260acea6a1ed61c45c89df22268405a001704abe0a64c10c2266237f03f97b1c953dab54ee8615a34dc47f4bd92a","ssdeep":"1536:2IkLrT31cOU8caqONn2Z+O52TDTkdyG378jiASz7PWe49p+oMBj83bNXnBxp0mts:2I0H31cocPzZ+O52TDtGJPJ88UbNXbpO","tlshash":"2e93129f11833cb02b2b3944c2a678d8d4ddc64c8ce7aa348959d13e6f7258a53daf47","first_seen":"2026-03-01T03:18:18.470464Z","last_seen":"2026-03-04T23:07:04.105685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRAMD1WTH0AsD1uQAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJRAMD1WTH0AsD1uQAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gSXFc26cpxhX%2BRAsW8hcbr%2By8vKsmf8aesfSVmTR%2Fq1VzyCP3xuRmN8GOHN1OU3EhlE4o0j4yjQRRmIPA7S5gi9R6iYmAviOsE%2Bgm6UR739vWlUrzVO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8962efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62101,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced","md5":"3c899b82bde5940ffc883159bef1a5cf","sha1":"6629d28dbabb8751b9a7d028c596a9f4bfc4dbb7","sha256":"6a955b5cfd6d6d8ee5444082e728366f37faee5721b9800bc3e01440bfd98e8c","sha512":"f6990f74b69ad0c0968c2c6244c7cab2d29f6ee421a8e34342e3e45b86ea84265a2fd63e1c283a7b78cd8d0bc464cf81ec1ef1d0fe000bccd5d5b41a8d7bf510","ssdeep":"1536:+E68uPTqrX02XjRwH1R5LOzNRPgcB7YjY64vNLbTgyZq:tluPT0huH1zmNRogLbTg/","tlshash":"b95302e1ee16894f28ec661ee67640416cbb116a4d70e0d881b49fffd6d8623dd70d0a","first_seen":"2026-03-01T03:18:18.542416Z","last_seen":"2026-03-04T23:07:04.108208Z","times_seen":2,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDIAQKxgoEIuTJHOME1WSEOxnSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDIAQKxgoEIuTJHOME1WSEOxnSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLesS%2B%2FN0n%2F0nXZZ0bf5%2B003%2Bv10MUlCI3r72Lk83ahJ8Ta89IlftdOGuK%2FYTM%2FbW0lRNXQOevz3zcmTJUCOnqcmucUp6udrko3EuIyjl0w%2FnfaOEh97\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fe89b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8428,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 200 x 36, 8-bit/color RGBA, non-interlaced","md5":"bba03b0127f1688c94a686c55a224d66","sha1":"a56a859abedf5aafd02f7908f4080bd31e553f66","sha256":"6b5fe8912e2865ab9846c1042552fbd2787d53d4500d43b71f8ffa433bd5466b","sha512":"ae33c2d593cdedef0753bfdd12b2c60c29cecc09c083ed0603e596b22123f4d6d08dba60bbebebe7713b10338a3d6c06484dd2cf2ea072eb17c364c92cb0458b","ssdeep":"192:GBdy+zqq0V9LXbOfPVdAlIxh1lWCf7UnP592:GBdy+uTLSFOSPlq92","tlshash":"ff02ae3b9b47c9d8f6067f218f82f06f4b46003709e5c744c82b5469cf638a7a4bb100","first_seen":"2026-03-01T03:18:18.566996Z","last_seen":"2026-03-04T23:07:04.110528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEDVGDxDMTuD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEDVGDxDMTuD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnlpWwsvBaGbwhNFt%2ByoatgJ8SP4zP1G%2Bxa%2FGwpHMiueV9w53KbkC0z%2B1cF%2BTmRYpmNIiQTPw6f37pzOX%2B5igiolz88%2FjnjG0ELavEGF2aHv%2Fordy17Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844d9792efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25670,"size_decoded":0,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x120, components 3","md5":"5585d38038e5a8a6006f63da24f31216","sha1":"54b87f0ddc1edc69d069a2d55045afba94c5d696","sha256":"d675c69187d7fe0bac7ab037ad1006cdb89627c275724b0357d61bb4d322fcce","sha512":"d95b8eb23baa8497d5fec3b144ed03c8e38481c9cdfb57fc6594bf53b752f6c1e32eb952a346c43900c11b4e536206d20591aef70a246f4e1b1f7bcb20dbc0e5","ssdeep":"384:nmvWoLWjuCxaejKQivHUY6uBupt0capX/THkWPDvoEsBydfsEcrBYt6zPvLb:nmeoT1MW0euvapvrkWP0E2yeW8zX","tlshash":"d4b2d00ca66a3c61fbe50675d6b0ca8b9612ac73f075d4787d1031e9ffec26014b88e2","first_seen":"2023-06-16T19:28:10Z","last_seen":"2026-03-04T23:07:04.112356Z","times_seen":9,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEEbWUNEUENZRSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEEbWUNEUENZRSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2F0hqnQHj92VDVAfJvR62LKsAN0NNTF3FpWnlcZhVr7swtIWvD33Kh9PG%2F%2F7jkBcExFoVmaMSdIp9mzWba1t6%2FcRXTr5zprqcENcXMeD%2FiG6sM8fHbl6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844f9812efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"377797327ab881877ef5ce453fa45197","sha1":"b1c8d71a5234315fcc026882ecd2c77ff0de976b","sha256":"3099efa2011eb561809d08f79def07c98da683ce31c30875c84edb7fb4f2cfdb","sha512":"c5f4614bdbf2c228f5f443d7da902df7830f3babb486e9d70c00020f663d95e27d904ad2a60cc6ea2f1137bce2d0175750ce108746fde82717b75af23b54af96","ssdeep":"192:0Sy9k635BLiv5r8wRXEYHZPG/ZpnQIqW8w:zR635BLivt5UYdGEbq","tlshash":"88a21728fef1bab95408a23726e628459d770fc7e6416d4579cf8d5a6f20bcc8c8b046","first_seen":"2025-05-31T11:58:00.906059Z","last_seen":"2026-03-04T23:07:04.114413Z","times_seen":5,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /PDNMKNxNTI0WNOyZURV.css HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5dma%2F%2FnieA%2BfMJXgtzyIM%2B9HVW9ToAIUdBZ%2BG3l2YNKbsDbmdDFxRZhKdN1smVxtIQGopvN5V2rM4ls664CqxBmm3Mtk8hPoQiaElhV93W%2B5YKQICZb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc87f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67219,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (352), with CRLF line terminators","md5":"b9aaf3cf42c6174932193ce48bc362fc","sha1":"1cf8e6c67ed6c7239fe34e7f371e5c5286f46de0","sha256":"ca17ae1ac6d44cc4af111ba086f8e0144091197ad7da155c46737a982cf854c7","sha512":"2c69abbcc8c57d1dbd7d7aaeaa899638c37fa38b1b7da08b26e875116d7e54c8a2bb62db6a6097c66d44a28f7663e369cd9a18f7800c05aa009a8774fceecf57","ssdeep":"768:jl18b8Cl8o8J+WdovNLC2SLr1a7tq6MY8wZbaxoPXwNpYiUJKIR:p18b8O8o8J+WdANLEY8wtaePXwNpYiU9","tlshash":"8e63a832a621205cf52bd172a9e35b5f3e6f4013e35317f9faa13926c6ce45b0a726c4","first_seen":"2026-03-04T23:07:04.1164Z","last_seen":"2026-03-04T23:07:04.1164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqEI1PJROLDI5RKRInDy5SAHWRTEbH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqEI1PJROLDI5RKRInDy5SAHWRTEbH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G3WEuN73d50X78UILD9Pd9c81WEKDBBBmlMAa3L5ki49gqIrIx2vqYkz9Z%2FU1IHLN0sjVbPnWf3ZwMuKmqzTpQNPG1LbfLYRlbPYcujbqAotA7Md32B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd88c2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138430,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 300 x 208, 8-bit/color RGBA, non-interlaced","md5":"aa1ece1221e373d42a323a706d2de791","sha1":"70955c1cc5c1db9751dd5652cc0ff2c859bd89d7","sha256":"563c4348226af9c20a5d6db58e01f602b3d63aee07e94652fd8b07c46477e7d0","sha512":"f9117ff21f446500b074f4aa907f3aa6ff73aa026cc073dcf2181cf07c07ea136cd5dea1f9446374b425e20287cd969cfc726407777964f20c74b89ced169284","ssdeep":"1536:yT9uoX8ryEAviGz4tAQmFexNStqWOCda551UTbcWx+kwAm1HXfbQjPAq6xOUSWzi:3S024OMEeb+PUAm13wP/6YWzfTn3V1EN","tlshash":"1ad3127f61e4d4a277ca642ce3f22361f098d9867a2e558dc56fbc89504bcfad8c052c","first_seen":"2026-03-01T03:18:18.526709Z","last_seen":"2026-03-04T23:07:04.117858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 04 Mar 2026 23:54:34 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0YWW38ZzEstJtvk8SVEoIFrJwXPDQwGm0ra8pSt8OJNezYBsolQuR44Z3Uq5LtKJLjEgR5HvpOiEd9rWuR27y7qmD6tWHiCN08J%2F57%2F3XBRIGFKhxLP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:34 GMT\r\ncf-ray: 9d74883fe89e2efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T13:49:40.769016Z","times_seen":292179,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEDVGDHDMTuD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEDVGDHDMTuD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XO%2BsPcD7vEJ0ZdlDHis7CIYoFSF1erwgZFZyfWGOrqB1HbZ%2F2ppELAjzjrysui4NrIvx0j5z5PzuqLo6JdTYqh%2FraB862LTfBN%2B2n1rAn7VYeKZGGEZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844d97b2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12862,"size_decoded":0,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x120, components 3","md5":"7b2b00918f29943ad19825606c96b8b8","sha1":"c185f04040082acebf07d147d6871a0bc28113d1","sha256":"080a6cbf4bcd5d895f81aa01605ad5e6d737fa669cc5cbbede074c17222c117a","sha512":"a4bbcdd5d1f54dce3aba5469fc0f28425e156801c44ec06eecf08ba55231d1b680084028691ceaf6a81acd0c42126247407dad778e00b47b2604cbf37bd5f843","ssdeep":"384:a1/ktYqUaxFY7egEsG9nV4PZ9K+5tw7L1Cl6E3R9KCRQN:gx7axu71WLcOD7L0AE3R9KCS","tlshash":"3942ae1e14513ef0d9eda25a68f3c00303192dbeb64b69122e6dd9af3e3000b3977698","first_seen":"2025-05-31T11:58:00.922755Z","last_seen":"2026-03-04T23:07:04.119821Z","times_seen":7,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEExQUDDnHvjOStjTADfFKEbqQD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEExQUDDnHvjOStjTADfFKEbqQD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBDI6hTAAw%2FGT%2BPkAzXdS3ijwtegvTrLepnCxdhcg%2BTs3Cr7NFwviDb0iaan%2B554K5q3GHOTJo4WdDPp3fgFDhfPZ%2BZXFHUzlbSBGrWTmFN2WbSJsr7W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844f9842efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"308e0fc6fdfc79ccf45595879a980147","sha1":"7fde0b33a291f45acdb581063c9f40814d88d3aa","sha256":"89d2ab93667e720a6a282cbf7350f88d6eed8f006cf160e50c96dec58760394c","sha512":"9c886636a692a7457cdb851fd86510a1d544e25d6686597646a72b66abd3300084a271d60e4418ad8ad5c45422563ca394f8ca41e40ccb507b2b6227ef84ea23","ssdeep":"","tlshash":"8d01757767b32d3648262a563a024023f677d8cd2256e01c1b10f09bd0c92434b60637","first_seen":"2023-06-16T19:28:10Z","last_seen":"2026-03-04T23:07:04.120467Z","times_seen":16,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEExQUDDnHvjOStjTADNNKEbqQD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEExQUDDnHvjOStjTADNNKEbqQD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZCOD5cKfyCTRyqEFkXFWWfEFxyQb3DkLzvM5kPpV%2FrusILXpMqx93%2BZ63r9z3Lqplp7npno%2Fah8%2FeZ2%2BkJQmiUXm7jAW0GLCRA3avgdJmJImX3AI7zl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844f9852efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e95de579c6ca8b8f2d75c8cf97532a7f","sha1":"066bafa53a6b7517cb15b6f94b3c0ee5f831e310","sha256":"9e971b18993069386a24755051c56753b000ec20cb917fbcf25c85d0d2088705","sha512":"d301d545dede21861aa4ab1505f88976f7a0a12639923714207ec55ae966968801cb816ea132f6646b37915dd66d48127a11234f7580a313915c40b5d62683e9","ssdeep":"","tlshash":"43e068c239a06858de5c291798124897ad3fbe804a6786c94cb5c9f8611688eada8737","first_seen":"2023-06-16T19:28:10Z","last_seen":"2026-03-04T23:07:04.121627Z","times_seen":16,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-content/uploads/vip/k8-5.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-content/uploads/vip/k8-5.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 28 Jan 2026 08:22:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6979c759-31ea1\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=De%2BR%2BkaYxYykoSe5raAfzmf9Y7IBAuzBpQtAY0OjNXpp%2FrQ%2Bc5%2FNle2rtfz%2FccXo0diYYNu%2Fnv6GcxqSVTVUXjmGDZWbYRnxFlT1qzr%2FPZ4P3YvJ%2F4Ul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74884629c02efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204449,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2112x800, components 3","md5":"c58e16f6ed67f3f820f9ee1005d05f3e","sha1":"0499122c8df2a7f7fe42af0ccf67401d19108dbb","sha256":"bcd97224d7970be9e581c134305ce08e796aa96f5c6fd489e6c29f530902738e","sha512":"02b2b3e32a514b9a2743e5786ae842c0b0e677a2bd4cecd560d82f183a9d2c1de065dd8658a088fe3f31abaea3defe3db24a6d8820b76089adbb973af2858992","ssdeep":"6144:AwxA3su7abILNhVAIZ60lkwlRVi44Ihh87j7j+2hHXM:AwOc0abILNhPZxlPlS1ge7aic","tlshash":"641423309ef49797024ac4f5a4309ad39766c96426bf1348b626af3a549bf0ec0c7dc3","first_seen":"2026-03-04T23:07:04.122942Z","last_seen":"2026-03-22T08:57:59.141609Z","times_seen":3,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDyyTKHgLEy1YHxMrDIcUAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDyyTKHgLEy1YHxMrDIcUAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1lGLTeqprtkZFcnB9awv0RQ%2BTBkpZ9jfqFXiV0if3PQJ96FsRFIem3p2yvXMFtW1zyMbb5LwfkF5kc5vcXOLU2wrHs7XQ4d%2F7kHs2hr06Wqbnl4O2yb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8912efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95242,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 226 x 300, 8-bit/color RGBA, non-interlaced","md5":"88cb5526444e6e15a4678f044a670d23","sha1":"c4b9724e970c15e4d105054021722a6487842a19","sha256":"9897c14967e2d0e767debb29da5d7a8d025934cf8940940e9addbfd8b025fa61","sha512":"6a9b7ab659897746face8984eb3cb5f9f43e6ed3827e10b0952928d6860cd4c842d3ea37d8daef97f2212c44ae7d59836f05952cc5934384e585ffa4602604e0","ssdeep":"1536:t/t5ek+kN50YzIvUhIwik4+UIrlqd/7dqNDqE+T9Yo4sj91zciXKbYfpMkQSyCor:tae50ICkr4d/7o9aRYo2iXimk","tlshash":"b99312e7bc6cc548447de1a0cdafaa5db5269d2fca68041929dc7cf61ee1f00142e9e3","first_seen":"2026-03-01T03:18:18.474452Z","last_seen":"2026-03-04T23:07:04.088327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /vip.php?s=www.qidianzhuangshi.com HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFG3ZdcziamrHOAyI8WpAPZYyOKk%2FRbZA263oZHsVoYaAPnmo48A9dGdPUTPP%2BMrQ9TeehzLcma4f6Gzuxbsd65CNYgHjN1w2OmXIMbegwv9YO%2Fhe3iU\"}]}\r\ncf-ray: 9d74884499692efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15074,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (562)","md5":"c473e3696019ea5caa24f7483f205f41","sha1":"5595f4271e3908ebfdddb6fca1bde0c0271af473","sha256":"a7d2504040e7824868864a38e97e635841dfc7f3f249af291a428d8e1a9196cb","sha512":"87bbf307c7758c24f7efb3e7b51fc4dc67315eb56b370d4e501917a2be89b4c7e7cd7c34c6fb347714a3b494375c550cec12b48fd3b650d917be57da41002e41","ssdeep":"384:+5/OSC0uk6VtHOcDI0puy4DRuG3o5R88906:Q/O8uk2dOcDI0pgDRuG3c906","tlshash":"8a62d57252e119b32217c0e6aba2b71f70a2e503d529c148badc1af64fc3de7d957209","first_seen":"2026-03-04T23:07:04.124451Z","last_seen":"2026-03-04T23:07:04.124451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEDVGDRDMTuD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEDVGDRDMTuD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lS2PS3kCoM8YpiigBbupkXBWgaQevAUHIsCpofZhJj480KHvYYCDodE2qhF7h1wU4Gswgw%2FIyvE6iMC1zuEmdKjhgeA5lIB9Vd5DqxlKhq60udve5ivc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844e97d2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43220,"size_decoded":0,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x120, components 3","md5":"5ba2aa976eb21a9f3db859b18778126b","sha1":"10ffeae1d02850fbef707f37c251a5d180617794","sha256":"7562e6f8dfd0ed5321fff5816886f9531e1a37c840db222dc7c00b0e3e0dd707","sha512":"d814e5aa4d5f88be059654e8f8455c68c3fc687cebe8970cc26da8f77b9a4c44e362ae0a15f65009f628a87e4b37746d1bb69f79d17452a385b46fd5510af0d1","ssdeep":"768:BtAkTJfok8H3QmhkH43fAEhFtcKA6Gz9hje+bKfHV7LGfW0:BKWo1Q54vAVRI+bUVfoW0","tlshash":"f513e18701d3b0d40761fe3539ad700171d09e61e6caaadb3d6e9286f763f0aaaf3401","first_seen":"2025-05-31T11:58:00.904201Z","last_seen":"2026-03-04T23:07:04.125805Z","times_seen":7,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEEbWUNEPENZRSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEEbWUNEPENZRSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRuk0ODEvtRFzOQ%2FKOUOgnUYPF8b8ab5T3xSJsKvBMrO3Gsi7Tu3VvjcEuREqJXRnebTG%2FMbmGNkKYE%2FNV8MVPC6lSaGLQsIEcKannuOtybn1dmUD7Wa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844e97e2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"6f089936549b90dddfc1cf80f1b4eeef","sha1":"9feeaf707ab912486cd0c0299d96aebdc768af7c","sha256":"a185b2ae3afdbf9f527cf09eb418e2ef0ce7ebab68338be8b66065e013964bfd","sha512":"ab694dc24d27497710f050ad90893c6b9338767382ec07b5dcfb2cafbc16fbf35aa6a65417635612403af65bfe5c34cee1dd121dbb0fde5aa9b0805f4c74d2e2","ssdeep":"192:0So9k6r5BFNsJkrKbGNBcTo10517pr9slbrBzr:z36r5BFN3aFcGJr9s5h","tlshash":"60a23b28fff2b669a954a1323ae124821c770bc3e582ac44b9ce8c5e2f10f9dcc4b551","first_seen":"2025-05-31T11:58:00.921894Z","last_seen":"2026-03-04T23:07:04.126535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEE8QUDSqTu0A.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEE8QUDSqTu0A.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpLmg6Pd%2F5mR%2FAXnpP8eMPTIpHXYqoyKnSNHu9hFeQtTjjohqbu7fa7seaZefZeIV4x5fN9C80I%2Bi0ySzy%2BmYbaJ1Tt7l8GFxYIlDSwG7WKKAaE%2BPS0B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844f9822efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced","md5":"bac27716378282119b605a0cbc365c12","sha1":"6a67319e3490368818d060ce382671b4b65d71d1","sha256":"56b063d475fcfc4df77e974bffac5e19a3a812fa644a406ca83318daf00eb61a","sha512":"ece726c26ff3c55ddec0dc4b2e60eeeb5d49a92ae6f53b3ffeff5bf351f4538b49998ba873ffa216263e3275ae51b83a3492a8f3f2631ca4720ea10fa7093e89","ssdeep":"","tlshash":"9a41f91ee6907cc2f34eda5b18e960b32a1319c2dac4e696b88ce852483c1b7151d5e7","first_seen":"2025-11-04T08:44:05.911477Z","last_seen":"2026-03-04T23:07:04.127182Z","times_seen":3,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.js","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"81z.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:14:19 GMT","end":"Sat, 16 May 2026 07:12:07 GMT"},"fingerprint":{"sha1":"55:BB:FF:DD:22:D8:60:22:3E:A2:56:38:90:EE:0F:AA:88:61:A3:26","sha256":"B9:6E:36:92:27:78:44:A3:DC:D3:EB:C4:F3:A0:B7:92:57:0A:BF:28:50:9D:26:9A:B0:DC:E0:3C:9F:8A:15:72"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: analytics.81z.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Feb 2026 09:21:24 GMT\r\nvary: Accept-Encoding\r\netag: \"69846114-10984\"\r\nexpires: Thu, 05 Mar 2026 00:02:52 GMT\r\ncache-control: public, max-age=14400\r\npragma: public\r\ncontent-encoding: gzip\r\nage: 223\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fi2DzBDSLHTIyJjio9Cdgexe6Lqwyz%2F%2FUUJc7JfKHt3dK6jyP5g03L6OgiI%2By19%2F%2Bcp8vJlnWfEsAT0hvXsZedpdPx57CNj5dr%2Bpk107AiJx\"}]}\r\ncf-ray: 9d7488458cd423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-04-04T12:53:57.513813Z","times_seen":13911,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":21,"dns":2,"connect":1,"send":0,"wait":19,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T23:06:33.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:06:34 GMT\r\ncontent-type: text/html; charset=gbk\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmYFvJkJiWLkNBGeDsqsuPzLYgd34%2F9Sx9P8IzssnOJC2pcuWZMWMOtlZBhK2k4RRB2uuT%2Bs28s4dalkTg%2F6YlVLeIAjRCsvJgCA4lmyZey5PLimupL4\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d74883978afc759-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70859,"size_decoded":0,"mime_type":"text/html; charset=gbk","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3893), with CRLF line terminators","md5":"ac7ac319a32c8ff908e33b3185222f4a","sha1":"c87f68d5501c4df2909b82005542ce2e04da246f","sha256":"d30a9595db9ad2b2005d02008d31dd6d129015be2350be5556dfabe196e93039","sha512":"fe24592e7271ca842062224bc2358876a5081366bed232bc8daad10067942cc2ec5900a1a5e0e9759ab45dfdb203564828d667a87a6d869a7bc9021f9079a852","ssdeep":"1536:jb8PbewmE4glvPiRME5QFjgG21G0Oko4nl3k:jgPbewmE5iRME5QFMG2pk","tlshash":"5d63a42253c41965807e53de2ea867b9fa70b0b7bb014609729c2f877ff7ea44d07846","first_seen":"2026-03-04T23:07:04.128718Z","last_seen":"2026-03-04T23:07:04.128718Z","times_seen":1,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":65,"dns":43,"connect":1,"send":0,"wait":600,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJ0OnEIuNJRgFD1uUAHWRRDpQ.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAPJ0OnEIuNJRgFD1uUAHWRRDpQ.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/bmp\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmC9WQ5xrIXIZ9My2pqQB6IsxT0AGnDoKQKWWA3pqIziGuF%2FEqbEyN%2Bt7%2FbEavLxQWDqDid8naalGrBt5%2BJ%2FH%2Fzx6NkY%2FEGbxES0EPNtK2VjCuw%2Bsvlc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8942efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76903,"size_decoded":0,"mime_type":"image/bmp","magic":"PNG image data, 276 x 300, 8-bit/color RGBA, non-interlaced","md5":"b6f8d1406b0e638d9fdf10471746dfe6","sha1":"31a32f26dd9d18ab3d280d02ad4a83675d482baf","sha256":"aa24dfc2da50a163b0bbcdc42f28149e43794db74ea9b36c82a2017786b6aa1e","sha512":"ba31749f9dfa6ef384ac6c64d646b72466e779a23bdd6943ca5d8a47d0fb06352f0c885c34c170598636cc1620f4523702b68bbfde17fede918b8ebfda542794","ssdeep":"1536:RDXXYoF/4CLIzF/0J6x/TUCSmbnKOZYqhZJQq0zvZDe5KN+:ioFACMF/0i7pSmDYqh7f0zRDK3","tlshash":"0373027899f12725f4d0348657431b05908b0eef6e71d3f33a28d95e167a6b78702bb2","first_seen":"2026-03-01T03:18:18.538321Z","last_seen":"2026-03-04T23:07:04.130022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDIAPJ0SLE1cOJRcrEIuYEOxnSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDIAPJ0SLE1cOJRcrEIuYEOxnSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdYUE3td4OGiJUqi%2BoruRp6qDjxnrcARZg8kO%2BHwLbljJVro52sbtKmESBNOWErZp4VRXtnUpoz59QkddWAgUuNxFsKgvnugUUgqPV5NxLdfdu%2Fo0JCI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fe89d2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10320,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 200 x 70, 8-bit/color RGBA, non-interlaced","md5":"dc1e53695079da93e0a08a7d51c19fca","sha1":"49266f89cd64444db68ac87cc4d180f444a01505","sha256":"8521d3003265ffdb1fb7f69168e716c827f2bf06dbb9e602fcd00ecbb031f6f3","sha512":"77e14b773d09f519254a563e76e1428162dbf1db2b564e34cfed1fb23950f41dd0ae73fff83643db75d52a3ce9f66e4fded698c613e44905bdabddc3bd6d623a","ssdeep":"192:ha74OPPMC3jhKyEiHWNnn6/QNEaaM1Ugs9MFLviN2UQKoTcDYMTUtfR0J54:4P30fiHWl6/aakUgs87iNNGcDhTUv","tlshash":"a8229ef01cecad9a92dc28f76bc5d834191146299181347aca7cd1bcfd99364b2ef316","first_seen":"2026-03-01T03:18:18.482621Z","last_seen":"2026-03-04T23:07:04.131538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/QOjROkypNkNSUtHpOS0rOjkZKtZRTS1U.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /QOjROkypNkNSUtHpOS0rOjkZKtZRTS1U.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKOxURk8CKDxNTD.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DXv%2FbAiZWIiwZIXMq%2BRSaWz7kIWGy%2B4e8mo7zgKzWl9fE16ShAFmPTpHaOD94LHH4yjQpffhBn%2BOGeE1QTvV8qvpSQiN%2BPQPHHslWdEaOY3kG5wwix1\"}]}\r\ncf-ray: 9d748845198e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17248,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2c855ededb74a1a8a58062ba34ace9a2","sha1":"7bf9f629173247b8a92759dc1d2ab13d130efb44","sha256":"ffd84366ddef067d5de70a595aa75e19ccc73d00b98969ce43dc8602a346364c","sha512":"76e7ef5d688a3d7c45cb0288f564f8d1c377e47eff4f1bb0b9dfa319272e67634b09a00975fd70ef78526401ec98d9d09ba32f8dada1b1162a461ba17639b3f2","ssdeep":"384:+5fdSC0uk6VtHKDI0pu9gQcn/hNOUQgfm890xXQCeeA:Qfd8uk2dKDI0pogn/hNOUv90xXQCeeA","tlshash":"4372d7b161f22533621380ba1baba70f71b2e503c41ad0447adc56f18fd2de7d9ab748","first_seen":"2026-03-01T09:48:29.097202Z","last_seen":"2026-03-15T20:06:19.431619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.js","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"81z.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:14:19 GMT","end":"Sat, 16 May 2026 07:12:07 GMT"},"fingerprint":{"sha1":"55:BB:FF:DD:22:D8:60:22:3E:A2:56:38:90:EE:0F:AA:88:61:A3:26","sha256":"B9:6E:36:92:27:78:44:A3:DC:D3:EB:C4:F3:A0:B7:92:57:0A:BF:28:50:9D:26:9A:B0:DC:E0:3C:9F:8A:15:72"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: analytics.81z.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Feb 2026 09:21:24 GMT\r\nvary: Accept-Encoding\r\netag: \"69846114-10984\"\r\nexpires: Thu, 05 Mar 2026 00:02:52 GMT\r\ncache-control: public, max-age=14400\r\npragma: public\r\ncontent-encoding: gzip\r\nage: 223\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLFgnb0hPl8js1Ri2dY2wlcMvZI5e%2FV5psWrUpmEh3Q5a3%2FzMaZNz0SDroJx3Sjxal1RGku%2BuLv%2BlrI5p43QmtZldKqJZHU0Wvud9aMBfDji\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7488463c9f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67972,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-04-04T12:53:57.513813Z","times_seen":13911,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.php?action_name=www.qidianzhuangshi.com%2F%F0%9F%8E%81k8%E5%87%AF%E5%8F%91%20%E4%B8%80%E8%A7%A6%E5%8D%B3%E5%8F%91%F0%9F%A7%A7%F0%9D%92%A68%E5%AE%98%E7%BD%91%E7%BA%BF%E8%B7%AF%E5%85%A5%E5%8F%A3%E2%9C%8C%EF%B8%8F\u0026idsite=4\u0026rec=1\u0026r=436192\u0026h=23\u0026m=6\u0026s=35\u0026url=https%3A%2F%2Fwww.qidianzhuangshi.com%2Fvip.php%3Fs%3Dwww.qidianzhuangshi.com\u0026urlref=https%3A%2F%2Fwww.qidianzhuangshi.com%2F\u0026_id=df2b6e5aa6dd5101\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=wQP1jC\u0026pf_net=0\u0026pf_srv=178\u0026pf_tfr=0\u0026pf_dm1=93\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.qidianzhuangshi.com/vip.php?s=www.qidianzhuangshi.com","date":"2026-03-04T23:06:35.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"81z.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:14:19 GMT","end":"Sat, 16 May 2026 07:12:07 GMT"},"fingerprint":{"sha1":"55:BB:FF:DD:22:D8:60:22:3E:A2:56:38:90:EE:0F:AA:88:61:A3:26","sha256":"B9:6E:36:92:27:78:44:A3:DC:D3:EB:C4:F3:A0:B7:92:57:0A:BF:28:50:9D:26:9A:B0:DC:E0:3C:9F:8A:15:72"}}},"request":{"raw":"POST /matomo.php?action_name=www.qidianzhuangshi.com%2F%F0%9F%8E%81k8%E5%87%AF%E5%8F%91%20%E4%B8%80%E8%A7%A6%E5%8D%B3%E5%8F%91%F0%9F%A7%A7%F0%9D%92%A68%E5%AE%98%E7%BD%91%E7%BA%BF%E8%B7%AF%E5%85%A5%E5%8F%A3%E2%9C%8C%EF%B8%8F\u0026idsite=4\u0026rec=1\u0026r=436192\u0026h=23\u0026m=6\u0026s=35\u0026url=https%3A%2F%2Fwww.qidianzhuangshi.com%2Fvip.php%3Fs%3Dwww.qidianzhuangshi.com\u0026urlref=https%3A%2F%2Fwww.qidianzhuangshi.com%2F\u0026_id=df2b6e5aa6dd5101\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=wQP1jC\u0026pf_net=0\u0026pf_srv=178\u0026pf_tfr=0\u0026pf_dm1=93\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: analytics.81z.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-encoding: none\r\naccess-control-allow-origin: null\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreferrer-policy: origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJpDIOZqvCIo3eB%2B%2B76cOLJFhrYpzQMmy7QhJ1JkX1hIexUMvuDXyKJu2Ukb%2B0OYzggsVIxmGutrdnYV3Qnu7wYTchxU8%2F6OSsQhPRqPaHWK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748846dcc98be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":723,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/favicon.ico","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:36.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; _pk_id.12.8065=341359bd5fda397e.1772665596.; _pk_ses.12.8065=1; _pk_id.4.8065=df2b6e5aa6dd5101.1772665596.; _pk_ses.4.8065=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 26 Nov 2025 07:47:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6926b081-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MmGKZag%2B8bdGTGIPlEnHW0J7U1eDLVwQtR9f7VliIdxKSqbyOy1PTNw9UDvHNFAD%2BuMheb%2B67Trzgm6oUu3RnfW05K%2FCI0Po29FIMq3TBjnwsW8zw%2B6\"}]}\r\ncf-ray: 9d74884a9abe2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"244f9cd782d5a0b1338f81d0b2b7d3e3","sha1":"87b30a952f0dba5eebf9194bf723db095b10dd85","sha256":"accd9e2484a3d7b8eed8c33ead2b320497aab606c7c7fb465fedf72f5bf093ee","sha512":"b2702c1aeb0f7aee4e9f95c96f4de86ed439c8501f63de10c1531048f3875a378570b62e618be2fda6767a89bf96f648dca470e6e01e537350470e0691daf02b","ssdeep":"96:dWuCB+NX5FzVZri3F665Tj3xtsKMJvzRBlrDXq/lffusNm2Zb:dWQNX5FzVQ160j3kKMBpHqdf7Nm2Zb","tlshash":"1391d7535995ddced2a06e3e10d1f36211302bda8966c3e5a6733ad3f812c4f5c9d8c5","first_seen":"2024-09-12T12:37:09Z","last_seen":"2026-04-04T13:17:04.10482Z","times_seen":3149,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/QOjROkypNkNSUtHpOS0qUNjIIHpnUDSRKt.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:36.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /QOjROkypNkNSUtHpOS0qUNjIIHpnUDSRKt.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.qidianzhuangshi.com/PDNMKOxURk8CKDxNTD.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4; _pk_id.12.8065=341359bd5fda397e.1772665596.; _pk_ses.12.8065=1; _pk_id.4.8065=df2b6e5aa6dd5101.1772665596.; _pk_ses.4.8065=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:37 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3n0sc2lRPvj0osjmvap0xTxxkhbfZYv9xVRaNGEg9pelbUGBWNCs88QZ3%2FjRMlPdBnMt218CbeGyzKBU4%2Br6FJDAc8L2LWzzmyBjbKJVnp%2BZRRlcS58X\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9d74884bbae92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17248,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2c855ededb74a1a8a58062ba34ace9a2","sha1":"7bf9f629173247b8a92759dc1d2ab13d130efb44","sha256":"ffd84366ddef067d5de70a595aa75e19ccc73d00b98969ce43dc8602a346364c","sha512":"76e7ef5d688a3d7c45cb0288f564f8d1c377e47eff4f1bb0b9dfa319272e67634b09a00975fd70ef78526401ec98d9d09ba32f8dada1b1162a461ba17639b3f2","ssdeep":"384:+5fdSC0uk6VtHKDI0pu9gQcn/hNOUQgfm890xXQCeeA:Qfd8uk2dKDI0pogn/hNOUv90xXQCeeA","tlshash":"4372d7b161f22533621380ba1baba70f71b2e503c41ad0447adc56f18fd2de7d9ab748","first_seen":"2026-03-01T09:48:29.097202Z","last_seen":"2026-03-15T20:06:19.431619Z","times_seen":4,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/wp-includes/js/html5.js","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /wp-includes/js/html5.js HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 28 Jan 2026 08:22:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6979c75a-937\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8p67gvsBEu3LErwlBJfjZ85kunHbK4OvPfsMunBBpJoO1FG6EkRnzwWIyqjv2xR71UXtQNuamAfKg4yjoOkUDU46NBeND6ogGK8yDyU90YsP0UFYdnQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8812efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2359,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ef9a90e18b0df0c55fd1e601fb5e86d0","sha1":"a494975eb4f261770ce3815a9c6c03214619b71d","sha256":"c96c91af172b8132ec7ff02b36122a2d1cfcdda2befc4e03bc59718b901dad96","sha512":"7ee73f241f07b1e0dc2c6ce910158d7119020a71c9228a3811f7cfcc85332df12eb242f9d04b5e861342fb9c57a9ac87e8b2f3e6706aef1640135cf47325e0d9","ssdeep":"","tlshash":"e741953a896711345aa711aba7ef57043873c247470adf503cacd2111fbcd12299abf8","first_seen":"2026-01-28T10:40:22.402378Z","last_seen":"2026-04-04T13:42:54.657678Z","times_seen":139,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAYJxApE1WNK0qnEyyOAHWRTEbH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAYJxApE1WNK0qnEyyOAHWRTEbH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vosCQt711JDxn%2BGlQPO651f%2BPfpVdjs2UKYHRyuzDmuZs12ZTEVkuo6DXIgU5ljeDnH3krubfP2q3H%2FB9OtfMEElu4UMjgAKjoHKfL5tE%2Bhxp0c5gZaT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd88f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80774,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 300 x 215, 8-bit/color RGBA, non-interlaced","md5":"82f4f014f8b4420aa6bb6cf2f280aff6","sha1":"360838854f7c23f4cba7c7d480e0b62b838e0d40","sha256":"9302df1f7e9b3db1228fbacfefd18ab7c79f49a0b443aeff21bfb994bb969426","sha512":"18e9bbe0790cb26fcb58f9dfc49a4b7b88ca7f5d3962da9b6b84def3c060f6e89153918ef3f5c75f6ae8e87ece575d80157aadfe714a88b11fe9a64eee9b1dec","ssdeep":"1536:cSUG6GLdgdjMr8Nd7Q1fSl41GVMLbIiQHTVI5WB6Zh6uHUN0Ft:cSrJhgi8Nd01fB1GwCKU6Zh6uqY","tlshash":"f483124f6b6e8a03baa7fbae604064ec48fe68b511d5c829186f56183743bd6441b7b0","first_seen":"2026-03-01T03:18:18.575748Z","last_seen":"2026-03-04T23:07:04.136815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.81z.net/matomo.php?action_name=www.qidianzhuangshi.com%2Fk8%E5%87%AF%E5%8F%91%E7%99%BB%E5%BD%95-%E5%8F%B0%E5%B7%9Ek8%E5%87%AF%E5%8F%91%E7%99%BB%E5%BD%95%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E6%AC%A2%E8%BF%8E%E6%82%A8\u0026idsite=12\u0026rec=1\u0026r=796399\u0026h=23\u0026m=6\u0026s=35\u0026url=https%3A%2F%2Fwww.qidianzhuangshi.com%2F\u0026_id=341359bd5fda397e\u0026_idn=1\u0026cs=GBK\u0026send_image=0\u0026_refts=0\u0026pv_id=GZYmpD\u0026pf_net=68\u0026pf_srv=600\u0026pf_tfr=0\u0026pf_dm1=1048\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"analytics.81z.net","domain":"81z.net","tld":"net"},"ip":{"addr":"104.21.36.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"81z.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Feb 2026 06:14:19 GMT","end":"Sat, 16 May 2026 07:12:07 GMT"},"fingerprint":{"sha1":"55:BB:FF:DD:22:D8:60:22:3E:A2:56:38:90:EE:0F:AA:88:61:A3:26","sha256":"B9:6E:36:92:27:78:44:A3:DC:D3:EB:C4:F3:A0:B7:92:57:0A:BF:28:50:9D:26:9A:B0:DC:E0:3C:9F:8A:15:72"}}},"request":{"raw":"POST /matomo.php?action_name=www.qidianzhuangshi.com%2Fk8%E5%87%AF%E5%8F%91%E7%99%BB%E5%BD%95-%E5%8F%B0%E5%B7%9Ek8%E5%87%AF%E5%8F%91%E7%99%BB%E5%BD%95%E9%9B%86%E5%9B%A2%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8%E6%AC%A2%E8%BF%8E%E6%82%A8\u0026idsite=12\u0026rec=1\u0026r=796399\u0026h=23\u0026m=6\u0026s=35\u0026url=https%3A%2F%2Fwww.qidianzhuangshi.com%2F\u0026_id=341359bd5fda397e\u0026_idn=1\u0026cs=GBK\u0026send_image=0\u0026_refts=0\u0026pv_id=GZYmpD\u0026pf_net=68\u0026pf_srv=600\u0026pf_tfr=0\u0026pf_dm1=1048\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: analytics.81z.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://www.qidianzhuangshi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-encoding: none\r\naccess-control-allow-origin: https://www.qidianzhuangshi.com\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreferrer-policy: origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N4pdQorD7%2Bd5w2vWyg%2FCgo2C6tDrJrYR8oCMKEfNCIlUH73f4cnidbHSkvNki5mHyYpzBG0aMkT8PTkxZuY1PZBxsPFNmiZIrz7Qq9j1X2km\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748846bcc18be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":750,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEERRDxDMTuD.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEERRDxDMTuD.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orbkdAAEcl67njQqhbCA4i1e%2FALOzYWO3P7MaWFHA2kmYh9Zqp6MAqmbzi8D8XpJqQjQr%2Fn4XXvhNrExDzu%2B59v0VQIc6HC%2BZGWJQzX86PuUWDDwVY4A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8852efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207574,"size_decoded":0,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1899x613, components 3","md5":"5c9376b0426bd29216fa872d80aa89d8","sha1":"fdd2861e6e12b1d3392bd6f37b2de0c6f558cf7a","sha256":"69cdd42840ce08242820a7ef1de338e5cfad21ad451b4efdbeb3fef15aaa94e7","sha512":"76432d2cff7e29f8a42a96826e51b823c9fdb1041dd6b23016d8534f40a628aa783105b2f61122e7a8c57e232192dfce17cb7aa01b77aa31294a9943871502f8","ssdeep":"6144:GPlyqaPFvY3QccxnXxhRIixSW+Ki4JdIAzsUQxs5SFYzI:GPlyqYxEC9XXRIiMtKTJeAzsr0I","tlshash":"c314229ad374d693a4ef798410b2b360dbf74a299e18451fc4203a4846773e309f6e9f","first_seen":"2026-03-01T03:18:18.504702Z","last_seen":"2026-03-04T23:07:04.138542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEERRDygqNNZA.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEERRDygqNNZA.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQf%2FrIUp%2FVXHHJUsUcJF20%2Bfxi8fGxL3NB%2FJIz9E3t9eu55ec2bhYxFS1idilWG2UmEVyWUBbCB5dVi31GoFAJjjYbElogiBG0xRO8Tt1X8pes29cbuj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fc8862efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160479,"size_decoded":0,"mime_type":"image/jpg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1899x613, components 3","md5":"6fc0473245d874be187fd85da6d6501d","sha1":"cb93eec8e685a2186ae9a4c8ba5292dc0554d886","sha256":"98ceb8e24b9ac7e84aed2182d9cb8f1687e2e36bc72095c87297ea8ad2785d63","sha512":"b3a436d359d59f7f3385878638fc267969a267e2d5f7ea000a2b91aeb8de336ae77b53ed9c804ea6fc6277a8451b203134cfdf1fff697c11d0be59769a985937","ssdeep":"3072:qlEUhPnnz0SHEpX4B+pB9QE82U6XPI8GY2gf/4eZw/yBvBEgaY4m10C03WS:q3LAoKVU60Y2YQ7/yBd10C0mS","tlshash":"eaf312bde79fdc41fea813d408d61c6629316825a65177312b25dc7a85b23c4b2b3b33","first_seen":"2026-03-01T03:18:18.506857Z","last_seen":"2026-03-04T23:07:04.140123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":371,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAYJxApDycRJ0AqEScSAHWRTEbH.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwTOjBOtxUVk0ZUOx1Nk8CKOxfKROqDIAYJxApDycRJ0AqEScSAHWRTEbH.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiHRsmjucfBIZ1QyQ4o4bFeON3Q%2FsQBhF6FYiI%2F%2F896iDN5lkGyFLZkGGHyb8sNwCa42%2FWZf5oQrQbC8d4ujIxgQ4QqrHErsJV9YDSuuti9Vw1ZElfkS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd88e2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84845,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 300 x 297, 8-bit/color RGBA, non-interlaced","md5":"af3e9e05ca21d6da27fac1a6453efa2e","sha1":"a3f1416cf60739c570f1a75f602f05baeaf34563","sha256":"e363cf248b894f296340577d2670049dbe90971a6e446b872772de6168424b0a","sha512":"c0ca2753d0301319e4f3bfe8311c31ae7b4bec9d03ab075e6462beff996b2f6a2629b40bd41df4d5b8b8836ea24970cf817625b5596fc1e81cfd494ef351f3e5","ssdeep":"1536:TPXU18a6EipgAgkxNs8T/HwOa32dMjpV35h9iLRa6tN6ezXT1f2Izm2DDWaxSL0f:rXU1N6Eiemr/QOxajpZ5h9CtN9T1f3mo","tlshash":"9a831247237c1b34eb7838489335fc4814ff28b6fedc6a24ca54713d8a99a551eb6097","first_seen":"2026-03-01T03:18:18.4956Z","last_seen":"2026-03-04T23:07:04.1423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgrDykRJxqGF1kREOxnSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:34.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /YObTSw8QWujYS0HwNkNrOutJVk0ZUOx1Nk8CKOxfKROqDI9UJxgrDykRJxqGF1kREOxnSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:35 GMT\r\ncontent-type: image/jpg\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iYx9APM8gkBtCq6cTsZjU5bDO6Skg%2F5DbPkV%2FR3ITrzjgP5AcAM7L5pTIXUVMBg7qlyq72kf4aGl4J5qx4ww8X84eOH96jI%2FTjXlzp5qPPxARDsdnCz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d74883fd8972efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22439,"size_decoded":0,"mime_type":"image/jpg","magic":"PNG image data, 200 x 48, 8-bit/color RGBA, non-interlaced","md5":"e2f99a5212370fa96bb5e0ad1bd9d2d5","sha1":"c00a46183155cce9ed84a5a94da3f568a5a23260","sha256":"d58b87c922579148f456b31954225d360f2da238f23dd477fb6dfac0881fd7dc","sha512":"5f4c0ea09c58d00718f57951d15e57bde23dd5820c782f0a106b9a0c09976b035881f5091f9ae6ceb251c1da432e26545b39b99fdbacb2cb9e1a730ed4a849ce","ssdeep":"384:ISc6n3l9VsF/Ow66TNNXSVdJ8IUpHVStYExJ9f03e/+kQucEsz4F9:ISr3SF/Ow665tSVdIXS+G03JXEs4","tlshash":"e4a2d197e4064874bd4c84a4f6371d3617b83392556068d97fdc0926b3593f32b4adb2","first_seen":"2026-03-01T03:18:18.590536Z","last_seen":"2026-03-04T23:07:04.143454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.qidianzhuangshi.com/Nk4YSN8NEEbWUNEOENZRSN.jpg","fqdn":"www.qidianzhuangshi.com","domain":"qidianzhuangshi.com","tld":"com"},"ip":{"addr":"104.21.27.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qidianzhuangshi.com/","date":"2026-03-04T23:06:35.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qidianzhuangshi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 08:11:26 GMT","end":"Wed, 29 Apr 2026 09:09:08 GMT"},"fingerprint":{"sha1":"41:E1:F4:09:AD:BE:8D:EF:70:3D:B9:BC:A3:9E:32:57:F8:88:E9:89","sha256":"64:C8:70:5F:F9:BA:5C:F5:93:EC:06:8F:F0:33:7F:50:EF:3E:4B:33:FC:0F:8C:62:78:55:A2:51:24:D1:82:52"}}},"request":{"raw":"GET /Nk4YSN8NEEbWUNEOENZRSN.jpg HTTP/1.1\r\nHost: www.qidianzhuangshi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.qidianzhuangshi.com/PDNMKNxNTI0WNOyZURV.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=urdoqqcdr5o7dqt9ib9vk3occ4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 23:06:36 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: interest-cohort=()\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFzKi%2FdKSGMCbZx9ZE04d9iTnhb%2Bb%2Bl%2B0Stx6yBDCmg6YdWhZPm5kg%2BkgsfOznZA7gGp1ZuzG7GPzefsoPuKPZH3Vt%2BU2Q5pR9LIXnZDWdgi9VAzpT3m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d748844e97f2efa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"bfd3f2d73794cf6db28048631a1c77ad","sha1":"abdd7a6b1ebaf58b03244e34c934b424932466c5","sha256":"bc94a30a2e39341a394f591de52c0e5e7b511994114296b31718a7d64bf6a8d0","sha512":"749b57f93dc71442fc887de1b992b2d9ad6a61b9500ef7d07dd51792bcb434181627bc76f6ff5586cc078843af6dba2b5c78a2ecd014552d24a88341aaba6506","ssdeep":"192:0SD9k6BXxn5BYJqkzRuVl4TCvtBCbi6dMB9jz8AO:za6zn5BYJBz8wKmlAjO","tlshash":"0da21928fef2b77e545661323ae614401d774fc3ea816c44b9ce8e092f11f9e8c87605","first_seen":"2025-05-31T11:58:00.904997Z","last_seen":"2026-03-04T23:07:04.144748Z","times_seen":5,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.qidianzhuangshi.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}