{"report_id":"918bddd5-8e64-423f-ad44-e1c9c1f19297","version":6,"status":"done","tags":[],"date":"2026-03-26T16:29:58Z","url":{"schema":"http","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.225.187.251","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"title":"笔盒-地址发布页：beabox.net","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.225.187.251","port":0,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T16:29:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"beabox.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"beijing2.xstore.qihu.com","ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"domain_registered":"2002-06-06","domain_rank":0,"first_seen":"2025-04-24T02:21:17.415895Z","last_seen":"2026-03-22T18:08:51.549508Z","alert_count":0,"request_count":13,"received_data":1697560,"sent_data":6686,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"img.tmzyz.com","ip":{"addr":"104.21.56.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2026-03-13T02:57:54.115092Z","last_seen":"2026-03-13T02:57:54.115092Z","alert_count":0,"request_count":3,"received_data":582141,"sent_data":1406,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ingest.twlrih.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-06-18","domain_rank":0,"first_seen":"2026-02-11T00:01:02.879938Z","last_seen":"2026-03-22T18:08:51.253704Z","alert_count":0,"request_count":2,"received_data":63531,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":2,"received_data":925272,"sent_data":869,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajgvkj1jsv.shenglinyiyang.cn","ip":{"addr":"54.240.174.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-08-26","domain_rank":0,"first_seen":"2025-02-26T19:47:25.554497Z","last_seen":"2026-03-22T18:08:52.491528Z","alert_count":0,"request_count":1,"received_data":1412,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fh3hfnb.xmpusy.cn","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-12-02","domain_rank":0,"first_seen":"2026-03-13T02:57:54.115879Z","last_seen":"2026-03-22T18:08:52.530715Z","alert_count":0,"request_count":5,"received_data":1331979,"sent_data":2506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"hljbrsn1gj.qiaozhixuexiao.com","ip":{"addr":"3.167.2.20","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-08-23","domain_rank":5792296,"first_seen":"2025-05-21T04:31:35.340299Z","last_seen":"2026-03-22T18:08:51.82267Z","alert_count":0,"request_count":1,"received_data":104096,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.geetest.com","ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-05","domain_rank":196356,"first_seen":"2015-01-16T07:12:35Z","last_seen":"2026-03-20T15:40:24.491625Z","alert_count":0,"request_count":1,"received_data":15981,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"vrbrave3f.yxevym.cn","ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-30","domain_rank":0,"first_seen":"2026-02-11T00:01:02.87816Z","last_seen":"2026-03-22T18:08:51.991963Z","alert_count":0,"request_count":46,"received_data":1734635,"sent_data":22438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"2a5o1b4i1o5.shop","ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":125610,"sent_data":4108,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]}]},{"fqdn":"beabox.live","ip":{"addr":"23.224.71.91","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":15485,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.224.71.91","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2520238ada88e2b2c21ba2bb9c9e60e3","sha1":"c7ec4f88f27a4034351a2f52c76d88e8139e4a7f","sha256":"bbc6653a0306fd58c57cde0635873f86c793491b5e0798adafef8327bf56a543","sha512":"e428a1c149dcc6dda6c45a0ba63c0a67a0e059875a7af13092878230d5fcb4bd0c20b4ddfb227a44e680586b8f5cc9d46c1e9d0433baf0f0ce4ebe8cae32dd01","ssdeep":"","tlshash":"3b110006005b507c50d2990b1f75ab061b49521b1c4ab4e93a9e940a6f0f24facbb6cc","size":1018,"data":"","first_seen":"2026-03-26T16:30:20.000569Z","last_seen":"2026-03-26T16:30:20.000569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/v4/gt4.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e10f4bc47f2fcd630ed843e9061cf44","sha1":"35b9e07ec532b978d2f92adcdb3d31a9f706383e","sha256":"d16f159d776bfadf27a75099cd3a16e3de499a39d26e7587d0831322f767cc4d","sha512":"8953dcdc7bf40d7c7d849719a6663c66f21fbee4460f2b7ee73d9ce2ee202a9ca68ccae586fd05b1bfa0768cddbdf4c99ce77819f8d2ec03f77ddf412fae8621","ssdeep":"384:0BDAKWacAauzIuUMYVbFX7YoUBXdwNRGjv:0BEKRa2c0","tlshash":"5b62538e68a6a05349b3b778cb5fa514fe694b7340248141bd5ce3586fb043487abfdc","size":15364,"data":"","first_seen":"2024-12-27T01:11:33.480297Z","last_seen":"2026-05-29T17:46:45.33229Z","times_seen":1514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/tag-CQx7xICw.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c136b87fe29abb46d9a7a5f9a0b2ab56","sha1":"b1902eb4ab0b396248e30a14554b7c16d791494b","sha256":"1d3a655bb9b102bce0450a26ad9aab2c8c86d47a79d08dceec1c552ae54d4aff","sha512":"37b4801f489fe6a969c30738b0c37c53c02c9484d112d3eaafbdf59102d336330922b90d53830666fedeae537565a5c2d84c138ed0c927449116beb8c6864e35","ssdeep":"","tlshash":"bc316619f06075bd126b4d6eb0ac7ca5e74ccbd8d7575de2f8de013502f20668b36505","size":1615,"data":"","first_seen":"2026-03-15T15:24:57.106408Z","last_seen":"2026-04-14T11:06:51.980642Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomePage-lUoZUyJm.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89af59a7f710b5b6060db2dc60faaaf5","sha1":"394387c5f532e8e47862cb6046837d5b5bb1d693","sha256":"bddf7bbb10ccd6a4c65833586acd209cfcccd56ccc143949028db6f54b02ea57","sha512":"db59a040286481a54468c0ca49c8c491bc8fa3af6313b3142ab409e9399bbddf1a4fe141f152d0c8b7ae8006a1faaf21c4b7083d1ff5e33266a804e2a8ad4c86","ssdeep":"192:r7pYEsOY8PWuw9J3bKZJGUpwQD/wPRORpWM1fM/9ptvhORTp0ksf2YjJi16+Ct2q:r7pYEsONu9JgpwQbWJSEdJn+Ct2mVDd","tlshash":"4262541ef013dabed9f608955d6fb8483c065f44ca2e8491f07eaa1c0620c6f765a7dd","size":15342,"data":"","first_seen":"2026-03-15T15:24:57.107443Z","last_seen":"2026-04-14T11:06:51.993011Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5cf0197395dace57b481cc309df24ae1","sha1":"cdca24fd63476b00a302045a132e2c20118b6903","sha256":"596d438d28404e35a4031d17187946e40c469c77481358d97d7f84ec250dc6b9","sha512":"d4720a569bb7272d85cdb6e3d8972514eef388f1b5b7f6b9433d6d114e5d77cd120ef18b8a1c8e8c63ba6f5b408d1fd0604994e725d704c802572862ec6e8cce","ssdeep":"","tlshash":"fcd05eea10274c2065a3264a9f7fa3057427215365d2a821390e16049f24b0fd256a84","size":256,"data":"","first_seen":"2026-03-13T02:58:07.881002Z","last_seen":"2026-04-14T11:06:52.043132Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GEY91XQ7RC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a2f81be302c95ec5d509fe1efd813a9","sha1":"48b83e034523cc09897e868b9505c352a591919d","sha256":"c6a17dfed07e63537a5f2b1e9188832facab7552b5e589a0419d34d285cb450e","sha512":"a96087f9f8d95349b7d0d8f16d6647aa7c7685e843e30128f5a7bb6cf51782bc89854d187ee5c33fe5a4289dd253500a202cf05c86d0bae2cd29a11b7b0d17d7","ssdeep":"6144:+VOK1WsG4ohSGZckTv8wRXpQm6CKqA8BK4yP8NHoZb:cmsG40SFkL8UG","tlshash":"3fa4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7465a8277f7c","size":462032,"data":"","first_seen":"2026-03-26T16:30:19.966717Z","last_seen":"2026-03-26T16:30:19.966717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.224.71.91","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd502311869e086905cebd873cc7020b","sha1":"4885e545a27686a72318152e2009d57dca184a55","sha256":"725c9a3a783ab5ef0452b3128cebb9ac3883d19632d5e1a926e70425038fe961","sha512":"d8bb1cc9b0dd43584e9cf9883933e5ac3727856785b56c284990d67d6b7ae698b87480c14de984125bb83e4addd0322d86b388f0a554fe6f416d9e638f748368","ssdeep":"","tlshash":"b3f05c4e189a700441b3b02f0b0f5604b9258627211edd50bf5e62007f426328ceebdc","size":652,"data":"","first_seen":"2025-09-22T13:40:04.4493Z","last_seen":"2026-05-29T09:37:04.493666Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/react-vendor-CjZsb-BP.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4c3daff76e9c753583ae817e4a6c2d1a","sha1":"d4293d97ea6d30a042961280c95b763295a4bcc6","sha256":"d0b831bf4a7e9540ae7a47afc72fee9baabeccb6c1e2e988e460a913c9f82bc8","sha512":"2fbb8aa4b61033eda7291455cb24fa08f1a279c9e71b94bff55124c68b8f644aef0ebe26ee7f07f930c6dbe144da1e9962d063af2b364cc07a53a7af002c3241","ssdeep":"192:5NdELVzXSN6lfHt9lhYsiA3Oermf5Gavw0lAfknmV+cHjmT:5N+RikN9/JUGavlAfkmct","tlshash":"cd42a3cc7599b0500aa3b970507f911bf37d38b6289cc1b4a2a6c4f8bab455dc137f6a","size":12470,"data":"","first_seen":"2025-09-10T13:21:03.844292Z","last_seen":"2026-05-18T08:35:19.483554Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/Header-nNF6SekL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a6b6b59adf4ccda5723d6b46af87609a","sha1":"c4e424f76c15295411308d36463692905a564079","sha256":"1531655418b0904199bff9f1c47c8925bac5662e00360361fc0b34859989cf8a","sha512":"ce5089b6900396ede6dff9ed77aa9c09ecdf6676f2a8206238a3ce78f6079444dcaf7668e479ca10d9c061dd079b958851cc20bfae4bdab68a719ba8e667b546","ssdeep":"","tlshash":"dd511f1ee1415a7d5cb7858a6e8fbd04bc299e88d72e4852b07af80f0524c3f6b673c5","size":2983,"data":"","first_seen":"2026-03-15T15:24:57.091442Z","last_seen":"2026-04-14T11:06:51.965806Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsSafetyTicker-Ysncr8u9.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"41db6b618277f5e7b6a91533e3fb7f9a","sha1":"f23771a117e78de826d91b6194b3b0b281e8e705","sha256":"533d35783c93a9fb411e9c237a7db76de87579e41ec0e32d31d3e8c9df643b79","sha512":"9c06db16c8ca2f5e08440d3ee7c3c106ebb7da209dbe0de9534435f4830091164fb137f3233fcbed4bcde8af064f49e9edde7c206673ad82984ddee56f77cce5","ssdeep":"","tlshash":"d421451e51114fac6df705a65d3fd809700eaf44cb5b8966b03dee003f64c6d3706685","size":1268,"data":"","first_seen":"2026-03-15T15:24:57.093096Z","last_seen":"2026-04-14T11:06:52.027235Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/layoutStability-Dq7IThs2.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5353d3e35cf4294f300cd4cfa90591e3","sha1":"ff6b45bb3a5c17714f70f8b1ab113e3b08873f5d","sha256":"bbcb3be5565ef159940a3f953c26550a3fe79e808b5047fddc766731f19953ff","sha512":"494be1d41f1b7a1c3f12758f862078d9490966348608dc8e109d209a0295b9cd7aa764f271397f56b99f9c2c0e123dfca5d8fb70fec5a21d1f04914ce39e426a","ssdeep":"","tlshash":"eb5185817aa5a432866a605689511a0273240f649f15c4e8f67d2e6f003bd8337fb27d","size":2634,"data":"","first_seen":"2025-09-11T13:20:21.059115Z","last_seen":"2026-04-14T11:06:51.959728Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.224.71.91","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7c3048c245dfeca941add76560d9ce0","sha1":"ad70236da3439cab654787281296632aa9b3d854","sha256":"07fd9b4c63e4ea5ce12ef81235681fec99b3d4aee039ba9c3fd374921cf4ae93","sha512":"13479d30aedd4d516978208dfcc8661b5530a7f9db0f73809c67b9612f69002cdd4576f66bf727e05d44a232246d28f493f23b20128e6210c62ff3b117498216","ssdeep":"192:zJN+P7zpnx01oDu9Ckk8Ii/J6QucCnSGH9:z63ru9BBlfucCZ","tlshash":"3bd1626e26b70431476b62be1beb925c3431602b3487ccd43e0d86055f92f719aa6fe8","size":6409,"data":"","first_seen":"2026-03-13T02:58:07.882693Z","last_seen":"2026-05-29T09:37:04.499678Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GEY91XQ7RC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a2f81be302c95ec5d509fe1efd813a9","sha1":"48b83e034523cc09897e868b9505c352a591919d","sha256":"c6a17dfed07e63537a5f2b1e9188832facab7552b5e589a0419d34d285cb450e","sha512":"a96087f9f8d95349b7d0d8f16d6647aa7c7685e843e30128f5a7bb6cf51782bc89854d187ee5c33fe5a4289dd253500a202cf05c86d0bae2cd29a11b7b0d17d7","ssdeep":"6144:+VOK1WsG4ohSGZckTv8wRXpQm6CKqA8BK4yP8NHoZb:cmsG40SFkL8UG","tlshash":"3fa4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7465a8277f7c","size":462032,"data":"","first_seen":"2026-03-26T16:30:19.966717Z","last_seen":"2026-03-26T16:30:19.966717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingest.twlrih.cn/sdk.min.js?v=454234","fqdn":"ingest.twlrih.cn","domain":"twlrih.cn","tld":"cn"},"ip":{"addr":"172.96.160.225","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"588cfbeb18b4b813c8065b0bcde5662c","sha1":"adcf3e3164ae634ca6bc8c4718e9ad766d62198e","sha256":"eeb08dc8d67ccf633b5aa4a33f1e206308c4e74afb3a396dedba73d7a1124251","sha512":"0a4d9483e467bc57385460c34992a10230306232ee4980dbbf8cf3b37b8a538a11d7f2ab6656c7e763e22e941f651f33312a49456e5993021cb8581d5325e9a6","ssdeep":"1536:u/NdaBxmHhOSs6k7Q40KimqPS42bCjoJ2R4zJy:Dyumj2eV","tlshash":"b853099573bba03643ecc225d0751302b336a4a63896407cb5f92ed6bb4da4661fcb7c","size":63145,"data":"","first_seen":"2026-03-26T16:30:19.991877Z","last_seen":"2026-03-26T16:30:19.991877Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeMenu-OAaEPRxc.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"582d5a70b090bd1cd1d73c2be62e3394","sha1":"d369182895979cf88370c9fdf2301eb2e24ce1e1","sha256":"f5c385f4c5a398469f9b1278caee5a8b34463e536b2493aebf74bd3e19ee020a","sha512":"803df2da82e5db4acce09b0f7723d45e28e5026daa3cc12db6d576760f3cef3c3e396a488d5bf405be3ad6213146b7607b15c9da0b1cbe4557c1b8c02f73d9b6","ssdeep":"96:ciFx4jX9C6gM6D3/HvaYPn2Bd9TFdkfltf0B0kAnXQzhWEAn9QQdRNeBIEl5nbvX:lKizvRf2RcLUzgEAn9QQdRit5rmQ5x","tlshash":"2ff1a41ee102abee51a789d5165ff44c7e1d4a58ef2e9060b03bf90c07a1c6e7667bc0","size":7828,"data":"","first_seen":"2026-03-15T15:24:57.108511Z","last_seen":"2026-04-14T11:06:52.004471Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/VodGrid-D_aALlDi.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cd6dc1d66376dc4b9c72c52c933dfff4","sha1":"852e06ef3a8d2e4c42be731fdd4194e453a05ca0","sha256":"005924e85fcbe361495ec6d35a862ef8364624edd1b3ce5c38ed88a463bd09b9","sha512":"74275633d3e59977292b6fd308c506215fc03e2f272723678173d756a7be187b6ee09f9f8d93bdd9bd3dc6c98bf7fc8d937530c113850532894af364e63a5516","ssdeep":"","tlshash":"b671a81de003aafdddf719e958fe54043c098e15db6bc4c1b079b90e1669c132a637c9","size":3480,"data":"","first_seen":"2026-03-15T15:24:57.070532Z","last_seen":"2026-04-14T11:06:52.012016Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/utils-vendor-UUdv1Xw0.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"01d9430173b04fffb1357e26ce126349","sha1":"c33b0e7215b525704cc171e55bda092626e53eb4","sha256":"630c039a5231957c4875ad51958c0a91971c2c8ee28a7dbc101aed56f9b8aad5","sha512":"63eb383df3906b5a18fcabb5be8f7b71a3004d6f67ac62da2758abbe6febe85efca6ac5bb3c3909fd331a51e786c93ce81cd5cbe53cb44abb965d3d4909ed246","ssdeep":"3072:9+EUIJvzVudqU9xN16ZhmTSc2XZKDRVm9WZHpiZEXUVvtrOr7QXL7Y/TJ3Bj2fIa:QMJvEqU9xN1TTSc2pKDR/W8Alo/T1e1","tlshash":"b3d33bc57295b0a243e760e4043f140bf2ba6d25294d8598f658e8df7cbc98a817bf3d","size":132413,"data":"","first_seen":"2026-03-13T02:58:07.83102Z","last_seen":"2026-04-14T11:06:51.932964Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/router-query-D7tBeB89.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c1016da93da75b8145b7f5a5c4b6dad1","sha1":"b2931142a71500f054184064ba021629ade287b8","sha256":"07cfda9307edd05f77a78274f28574f51ab4cb2e9515dc4018b516601146b8e7","sha512":"705d94b37733fa62fbeece196860c046c9e78e657e1b5b5c3d855e594ed29a3ef3757d4e5e48f927e2b0794981d93351559e0388abfff138e350b185e157a350","ssdeep":"1536:6R65ZhPxzG4hPeg45JlS8VcWd+eMAqdlHIooK82iL1qou48o991Y9X:6uZF0qENcA+eMJo0BaDY9X","tlshash":"3fb339e93193a2260af685e5d03f0115f1365e79300ac058b17d9fea796290fe1bbf78","size":109342,"data":"","first_seen":"2026-03-13T02:58:07.818671Z","last_seen":"2026-04-14T11:06:52.01781Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ui-vendor-DHDowlb1.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5201dbf7ef60ac7bab3e780fd7278c8c","sha1":"cf3b2d845c9d1b3e6d5b1ab316af104121cc8885","sha256":"67bb811b766d4c8b29cace6207e00988ef811c6a7c8cfc6eb4a49844e70e83d5","sha512":"ff3be56fdd5e0c291579fbeb3991c897e9506bc17a304f660c8de73b8e9d79aaa6bcf8a6bf90db7454d9faced05e575adfa06e29fe62b2731778b0b3f4a18813","ssdeep":"3072:7dHTzTletONA7odgnVxPkN9gkDlxw4mV2Q:hHvhetONA7odgnVxPQykDlxwnV2Q","tlshash":"9cb338c97161b57683eb4aca92ba811173760950744ec4a0b1bc8c6f287a94853ffffd","size":114591,"data":"","first_seen":"2026-03-13T02:58:07.82805Z","last_seen":"2026-04-14T11:06:51.95427Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/arrow-left-CILfl94b.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"78a2c2b826f8264363f0bc15f2b1442b","sha1":"181708467e4b3662cb8d5583fdc1917ab149c3df","sha256":"56a17e57a0eaa202756c28e92daa06dc7b91c253c87e0254fe3b0d998308074d","sha512":"79478ca5f053af11779530ccbee50369c8e28cc0c71dbf0e4973742ce1e7426929892e65c4537adb9ccf8461e209e2c4fa3a1ff49861fcb6a4ef14d42da71596","ssdeep":"","tlshash":"34e0266f298012b3027184781b0fe5ca564815fc836fb650b40243698a300bf46dde90","size":338,"data":"","first_seen":"2026-03-15T15:24:57.109514Z","last_seen":"2026-04-14T11:06:51.93462Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ScrollToTop-8oDbSTbW.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a994c4d0d57a101e2087abe71f849414","sha1":"857d4143e05e4c8199661eed23c6665b61f9c495","sha256":"5710cb144b303932368ccb6f2cf6463bf683212b5f02923127fd068b73601116","sha512":"d06ce31f4391f00f3b768a7de2fa2dd2ca2d9b803364cbcfd8a58df489e074e9e017d0d1a98062f2a796d067abaa092eebcc411c707be4218234c456e4d52908","ssdeep":"96:jIZ7RMFjOB0OhJqGqQFqF2GtRyzNfuBPzGoBUmimo8LONSL9qstLAStGKjWeQyHY:C7oS0Yr3FqsGTxGoMSL9lLttjWeQy4","tlshash":"11e1f99ff141ec35e4e706963a4fe68930203b84fa0ec485f17d5cae2921867c30699f","size":6773,"data":"","first_seen":"2026-03-15T15:24:57.181896Z","last_seen":"2026-04-14T11:06:52.010913Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/useScrollHideNav-BiyNAyFI.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"629e6ddaea1779a8891215f0b67ff76e","sha1":"07d3bca12a2a53ccaa0c78d2b8552b24350f441f","sha256":"d490190071c87bcaa3f51f9e61533e96abad3d0840609ed0d07427d51adc5e9d","sha512":"2d64e8b36dabe883426ae1285a19f0ee14daceb851237ddd7418700e872dd897e18b6ba13a6a10a9b2e1f66965e174c767f13381da5da147ca9dd5304d037f90","ssdeep":"","tlshash":"8131ac90a4d25abcc6ab06c9d33aeffe33777fc2b0589298c41d1c349199992d0645f5","size":1535,"data":"","first_seen":"2026-03-13T02:58:07.848864Z","last_seen":"2026-04-14T11:06:51.966911Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/BottomLoading-kZCn9SVL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4d2f14d6031303c140c6f46c402480ae","sha1":"2b76da991144634fe362a87608d5b1b05550ee5d","sha256":"00dfe14689ad055ff202b2ba067a0a977f8b28811985f1b617b98f05def94988","sha512":"6d65a54d7013ea0b090f69e7fe1bdaf5772b49936ede5d2e76514a5b4e4f1856cd78be7faf69ba3798f964d1fc9ddefef2307616f6274ae2278ebaa99855068b","ssdeep":"","tlshash":"6731e11ba003a6bc64e726665b7d5c01a805cf54da1b8c18a07e981e5459c2e3d732ca","size":1491,"data":"","first_seen":"2026-03-15T15:24:57.114904Z","last_seen":"2026-04-14T11:06:52.013005Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsBanner-BeuKxqmv.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"629de7f9adfe69f7782909db72c011d0","sha1":"a5dedbdb3638fcac49b9f1e3aeade14621426cd3","sha256":"1900ff0169753d9e2c46e95841bae89a089aaf7aceea727a89d798c9342f4e53","sha512":"2e6d0d62e1125fffb3e33331f596d8087993b2c5a5f0cc8637c1de01e9dc5b11b45c072d305d511610ae3784a1781a0f29ecb44d631d32e2822a02e51e9be442","ssdeep":"","tlshash":"0a71850de107cafdd8f318d06e9fa88478155f14ee2fc946e1aea50e1750c36d92a39e","size":3684,"data":"","first_seen":"2026-03-15T15:24:57.083778Z","last_seen":"2026-04-14T11:06:51.925682Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeCarouselBanner-BVCUmd_w.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d8354f2b4d7fd8b6e8d31715bd802ad","sha1":"53914208042393dca4cb62d36c08182f9677d436","sha256":"cc16744e57c4d2cc5083536d3293f5eece22a2b508f43ad704e77097bb2d8563","sha512":"8953f76e25977ea802e59cae5ea5ba72e928abc4d2622a84e1b006c7c246320d8141f47f09a613ef412cfbdc56a4990575a570215256cb9a58b3bd5ec627970a","ssdeep":"768:475XylA6wgkfVwNfkoLzqmEt8/d5MXOGVPy8YOvQxIy2nFAGqHSxf8A5ZpkHoQWR:UXiA6wgPnd6vxv81V94Z2a","tlshash":"6bf20ac96124b5b586ef09eb42f98554a2711404f00de6a870fdcdad92bdd880367ffe","size":34256,"data":"","first_seen":"2026-03-15T15:24:57.116129Z","last_seen":"2026-04-14T11:06:51.927141Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/index-DaCpjztf.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a3bb497412c6c14157b993df885367","sha1":"50779a12242a43e60870699320f7eb73c5f09122","sha256":"3c8639e1e0a17f630466935fa88b7b51fc66bdb02bd2258d460c38fabcef2a0d","sha512":"6e9e4853bbf56943ba190508747f74407f285028a582224326813c7fb6a6f48acce906c596d5c23b8d865396d79c6a13e6cb5834c043c812c95e7db538cc3869","ssdeep":"3072:A/rNcnx2aZmWyw2y44MBxGyhEUQqEc+qHv6BToDqwv4bBf7AFrg+jrfMC4G:A/Ax2atTEBplv6BSqwv4bB8VFIC9","tlshash":"b6646cd871aab5666be345f1407f1607b23c2d17a80c8850f125eeb93b7484a50bbfed","size":320042,"data":"","first_seen":"2026-03-15T15:24:57.151658Z","last_seen":"2026-04-14T11:06:51.963912Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsIconGrid-B8-agIMT.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"752479f83a30e532aa7dceed8bc038a3","sha1":"a81230788570ca055222afd5161c737db1f86ee6","sha256":"f31471686dd9d23c4d60da0dfb9b867693c929cacc4bfc5e8d6639c2197beabd","sha512":"bea9b185ecf636504c43eeb85824fe841f60562435ce7e975752b24f1087136d35838470ed94e61cf4967613dd2f39667c8cb1141db2650a190cecb9696a0ff2","ssdeep":"","tlshash":"b541454ee103eeedbab309e4915da500b8065f5cd72ec8d0f1bc96080760d57f93b299","size":2188,"data":"","first_seen":"2026-03-15T15:24:57.094909Z","last_seen":"2026-04-14T11:06:51.928408Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajgvkj1jsv.shenglinyiyang.cn/files/671713e14eb9a/countly.js","fqdn":"ajgvkj1jsv.shenglinyiyang.cn","domain":"shenglinyiyang.cn","tld":"cn"},"ip":{"addr":"54.240.174.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b4be2934ca03b7de88b5fd819bd0f2e","sha1":"d7d754cad678f6937dbdb8be99eeb01dfd630344","sha256":"2d55d3669fe0bfaa9239f56e754e526f94f637333bf3ec4a861fead36c909914","sha512":"3f4cf228b69ff5662a5b3908162146adbef42c16ed1c6171b9c23aff66212537a19d927df1b55373509bc524613180d070c468b9806c4b025e7061a8a6fc99ed","ssdeep":"","tlshash":"4011291cdce76136b42790b9fa7ae5283ead95131c5ae8057accc5684f60bda0c24a88","size":878,"data":"","first_seen":"2025-05-12T01:53:14.353294Z","last_seen":"2026-05-15T20:33:51.148508Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/LazyImage-Bx9PcZlD.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5e0645ec4004455824843f7eff8737e4","sha1":"69efdfbafd340ca6167b6a82596e657816f90f76","sha256":"9277e87d6dee332abd5103d89a968bcc98c4a9595c7b918b1ac6cccb4f3d3076","sha512":"c9e7216a74580652fadc869d0d178b4bbfc26bfc6dff532db7628c7531231b5c6b137c3530064108ab805f96d558ee85805cde4921dd949012853451d06da2d0","ssdeep":"192:/qLaMGj+jN9P52Icm1HlTG2PiZ3h2EYP8Fo4MY3s0oqBub1/4BSErnaYk0:/qLVBZGIcmRlT9PiZ3wEykol711/4wET","tlshash":"73f1e799e0a9d87ed5224083295ee049b93e1f59b90fc461f17c6c9ee250c06e87b3db","size":7989,"data":"","first_seen":"2026-03-15T15:24:57.158217Z","last_seen":"2026-04-14T11:06:51.958607Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsPopup-CRQttAJQ.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9b3578dd31474af9c259f3c363bace4","sha1":"bffb49cb7a42c8cb6275b3951c5087fc8794ebd0","sha256":"7b2ec247101e98860c557b29759d32f0690badeecb8c7bcecbc58647063d5ee3","sha512":"cbccee1bf9d2ba596208f041273dd74b4d056fe157fc774a68ae00071c57aa7846e2222807ff918bc340426571d4e7cad8e4f1c4d3c07b5acc7b0cad11277dc7","ssdeep":"384:HloV7aUkZZoa1duUc7FQlKBEqul1pzN+xr:HloJaxdDuU2FuGf2fzN+J","tlshash":"624229746082a97dc6f241c5666f5a08f4165f14f91f88c4f27d9c6b3b00c1796ba3f6","size":12869,"data":"","first_seen":"2026-03-15T15:24:57.149177Z","last_seen":"2026-04-14T11:06:52.023342Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hljbrsn1gj.qiaozhixuexiao.com/sdk/web/countly.min.js","fqdn":"hljbrsn1gj.qiaozhixuexiao.com","domain":"qiaozhixuexiao.com","tld":"com"},"ip":{"addr":"3.167.2.20","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc51efe98279017b8d31200017b7a3f5","sha1":"e83b1330c27cbf76bd14e5423f9dd0e72f9488fa","sha256":"84c14e4c510df2a1f810114a2af84253de52b61a7101cfd6c35373321a31ecc5","sha512":"6fdd13428a2c7b9fa71179d490823eb208a8821e4846bd4e72aea8e4fef6315c6d597dfd23e933812507c4ad6e5c119ebe75c4e3f72b50c52b933b7c82582485","ssdeep":"1536:Kys2S5e6+q5W/iwYjsx4MVvyQeHEG6sWMaM9JiqjmMwmiGd7tQ8inmjTTqp/Z7aT:cmq5WmuUiMkmi8RLinmnTUZ7aauVmo","tlshash":"d0a309ee65893be8ad776274337e8200b378d3f61a1d6452390985683db4cc6427bf1b","size":103429,"data":"","first_seen":"2025-03-02T04:39:59.296996Z","last_seen":"2026-05-15T20:33:51.031237Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsPopup-CRQttAJQ.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsPopup-CRQttAJQ.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-3245\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zoAsxnNoFprctYlQEilalnsdChc2RepunfDPMgvM4ypj7jE9n%2BkZlj735%2BPLDGGHDn2wZwtslnswmo7ylOsXtfaG%2FlcY9mHX2qSTszIllonF8OoGgKuV5x06QFU6Lo%2Be9p%2Fezu7\"}]}\r\ncf-ray: 9e278912e87d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11268)","md5":"e9b3578dd31474af9c259f3c363bace4","sha1":"bffb49cb7a42c8cb6275b3951c5087fc8794ebd0","sha256":"7b2ec247101e98860c557b29759d32f0690badeecb8c7bcecbc58647063d5ee3","sha512":"cbccee1bf9d2ba596208f041273dd74b4d056fe157fc774a68ae00071c57aa7846e2222807ff918bc340426571d4e7cad8e4f1c4d3c07b5acc7b0cad11277dc7","ssdeep":"384:HloV7aUkZZoa1duUc7FQlKBEqul1pzN+xr:HloJaxdDuU2FuGf2fzN+J","tlshash":"624229746082a97dc6f241c5666f5a08f4165f14f91f88c4f27d9c6b3b00c1796ba3f6","first_seen":"2026-03-15T15:24:57.149177Z","last_seen":"2026-04-14T11:06:52.023342Z","times_seen":10,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeMenu-OAaEPRxc.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomeMenu-OAaEPRxc.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: \"69b3e324-1e94\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As6%2Fd%2BXpdL5ae9TxVinVIwqTmy%2FL3rb3fJjTEntnpdiX7Mu7ZcWCoq22HL9weage4krTMWWCqzkmtux4LbGJOEVH%2F8psYTiqT2W%2FCa8AzjFZx%2Bwq7aHmE8R6cU8IQWdKAmXjJ5Qw\"}]}\r\ncf-ray: 9e27890def901525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7828,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5945)","md5":"582d5a70b090bd1cd1d73c2be62e3394","sha1":"d369182895979cf88370c9fdf2301eb2e24ce1e1","sha256":"f5c385f4c5a398469f9b1278caee5a8b34463e536b2493aebf74bd3e19ee020a","sha512":"803df2da82e5db4acce09b0f7723d45e28e5026daa3cc12db6d576760f3cef3c3e396a488d5bf405be3ad6213146b7607b15c9da0b1cbe4557c1b8c02f73d9b6","ssdeep":"96:ciFx4jX9C6gM6D3/HvaYPn2Bd9TFdkfltf0B0kAnXQzhWEAn9QQdRNeBIEl5nbvX:lKizvRf2RcLUzgEAn9QQdRit5rmQ5x","tlshash":"2ff1a41ee102abee51a789d5165ff44c7e1d4a58ef2e9060b03bf90c07a1c6e7667bc0","first_seen":"2026-03-15T15:24:57.108511Z","last_seen":"2026-04-14T11:06:52.004471Z","times_seen":10,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/Header-nNF6SekL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/Header-nNF6SekL.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-ba7\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNEV6KKC%2FF7RpRGctvlfSV7f%2FmLoroMrULXkqKAUnQdNnzZbf7BU3yM7QDalxUFO%2Fq53dQ%2F%2FbfOOK3Z%2B6rKpnAwVGm4uacj%2FaFTD%2FnzFZr7wSQLat1Rmsk%2Ft0MQ9KZ%2BaL2%2B9WW1n\"}]}\r\ncf-ray: 9e27890dff911525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2983,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2611)","md5":"a6b6b59adf4ccda5723d6b46af87609a","sha1":"c4e424f76c15295411308d36463692905a564079","sha256":"1531655418b0904199bff9f1c47c8925bac5662e00360361fc0b34859989cf8a","sha512":"ce5089b6900396ede6dff9ed77aa9c09ecdf6676f2a8206238a3ce78f6079444dcaf7668e479ca10d9c061dd079b958851cc20bfae4bdab68a719ba8e667b546","ssdeep":"","tlshash":"dd511f1ee1415a7d5cb7858a6e8fbd04bc299e88d72e4852b07af80f0524c3f6b673c5","first_seen":"2026-03-15T15:24:57.091442Z","last_seen":"2026-04-14T11:06:51.965806Z","times_seen":10,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/index-DaCpjztf.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/index-DaCpjztf.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-4e22a\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 34732\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6Z%2BhbE%2BWN%2FHQOJ%2FT%2Fz%2FaWN%2Bid5vo%2FF4%2FAf2QNb8aBnZaHs4kXeb28Zj2R3ERsDpDoHSw7rxm2dK3P2%2FHRUWbnMNeN26VNmEb%2F%2BZ%2F1m5qcs2oG78g%2BXp4mJLINHpfcnPSYcojDzd\"}]}\r\ncf-ray: 9e278912e87e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320042,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46091)","md5":"c9a3bb497412c6c14157b993df885367","sha1":"50779a12242a43e60870699320f7eb73c5f09122","sha256":"3c8639e1e0a17f630466935fa88b7b51fc66bdb02bd2258d460c38fabcef2a0d","sha512":"6e9e4853bbf56943ba190508747f74407f285028a582224326813c7fb6a6f48acce906c596d5c23b8d865396d79c6a13e6cb5834c043c812c95e7db538cc3869","ssdeep":"3072:A/rNcnx2aZmWyw2y44MBxGyhEUQqEc+qHv6BToDqwv4bBf7AFrg+jrfMC4G:A/Ax2atTEBplv6BSqwv4bB8VFIC9","tlshash":"b6646cd871aab5666be345f1407f1607b23c2d17a80c8850f125eeb93b7484a50bbfed","first_seen":"2026-03-15T15:24:57.151658Z","last_seen":"2026-04-14T11:06:51.963912Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/476_3721_960200_SLOT_-%E9%A6%96%E5%AD%98%E8%B5%A0%E9%80%81888-0ed5628b-a171-4e6e-83f5-c5347da54a74.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/476_3721_960200_SLOT_-%E9%A6%96%E5%AD%98%E8%B5%A0%E9%80%81888-0ed5628b-a171-4e6e-83f5-c5347da54a74.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 215503\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 7f4fb51f9dd144f8d6fc29dfc11cdd1c\r\nx-amz-request-id: 3910adf6-507c-4230-b78c-8b7c3f3486bf\r\nETag: df1dd8782097fa48acc5fd27fae5eaf4\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 24 Feb 2026 07:30:43 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":215503,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 960 x 200","md5":"df1dd8782097fa48acc5fd27fae5eaf4","sha1":"c1ef66155fad5703833c6530859aaa96cdd5c0ce","sha256":"60fa357f869218e5cf281aaa0cf71a13478eb38b1f466629175380cd428eec71","sha512":"181747e516f8a81b1fa113be26a94dc1e6788fb4ed585fc81bd2187a17181b1e8f7f959966343c985013db8ce26dfcc08f3dee864596b672d889ab77fa94c851","ssdeep":"3072:aro0wIJ7QtoiYfrkdfU/YgQTUPZ4bp5BUEOOQ9EvUvzo1n2b8AwCFjOo:aU0TRQ5df2YdTUPyp5BjKEIo1n2pjOo","tlshash":"94242217db708843846e2b7f2f564352e8da1ed27ad918a08b9867f1f31965ce01d337","first_seen":"2026-03-13T02:58:07.868063Z","last_seen":"2026-05-29T09:37:04.485751Z","times_seen":17,"resource_available":false,"data":null}},"time_used":5098,"timings":{"blocked":3350,"dns":0,"connect":0,"send":0,"wait":295,"receive":1453,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/api/vod/carousel","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /api/vod/carousel HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578; mh_ads_popup_closed=%7B%22value%22%3A%5B%7B%22signature%22%3A%22ads-popup-0%22%2C%22closedAt%22%3A1774542579946%2C%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%22%7D%5D%2C%22expiresAt%22%3A1774549779946%2C%22createdAt%22%3A1774542579946%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 996\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 26 Mar 2026 16:13:04 GMT\r\netag: W/\"2f01-ZsVymPpsXg37ohDTHLDvOM6vw1I\"\r\nlast-modified: Thu, 26 Mar 2026 16:13:04 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nx-encrypted: AES-128-CBC:hex\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12033,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9ba22e89f34f69c46fb7dceee07fb09e","sha1":"66c57298fa6c5e0dfba210d31cb0ef38ceafc352","sha256":"e6b7a794b55880a9568043d4512f7540b3bfe8ac47d3b31c247db7f2dd437bd9","sha512":"ca240c7aa325b808faa6a29e4f0a155b4b079b5dc4429d6fc20a803742910e6dd7b05046ef99cbc214faa2eaaa6a6e33432dca4ec8302a51140814a21816579f","ssdeep":"192:KJQiQowK8A3GjMX6d/qwGMQdrdKL0Morwc7R3fBdrTgyZEGR37Zwp2ZeP1kiw:KCdowKdGZytdrdKL0Morwgf7rTgyD7ei","tlshash":"53428d782318bd56646d456fde56ace801a539b24dcbb6c800beffc310233a5fe26825","first_seen":"2026-03-26T16:30:19.939121Z","last_seen":"2026-03-26T16:30:19.939121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/index-DaCpjztf.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/index-DaCpjztf.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-4e22a\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbM71%2FVnQZ6T5n1pnqEs5yECU4kz4544baeIgW6YJY8pHPwcPaknBqcSSC8P7pOxKZMairs6CQ%2FCNKeVznfhiKY9l3MwGa3TTIX70P67rvQ22vadS3s34sgz710AU1KrSh6PBU7O\"}]}\r\ncf-ray: 9e27890989c65689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320042,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46091)","md5":"c9a3bb497412c6c14157b993df885367","sha1":"50779a12242a43e60870699320f7eb73c5f09122","sha256":"3c8639e1e0a17f630466935fa88b7b51fc66bdb02bd2258d460c38fabcef2a0d","sha512":"6e9e4853bbf56943ba190508747f74407f285028a582224326813c7fb6a6f48acce906c596d5c23b8d865396d79c6a13e6cb5834c043c812c95e7db538cc3869","ssdeep":"3072:A/rNcnx2aZmWyw2y44MBxGyhEUQqEc+qHv6BToDqwv4bBf7AFrg+jrfMC4G:A/Ax2atTEBplv6BSqwv4bB8VFIC9","tlshash":"b6646cd871aab5666be345f1407f1607b23c2d17a80c8850f125eeb93b7484a50bbfed","first_seen":"2026-03-15T15:24:57.151658Z","last_seen":"2026-04-14T11:06:51.963912Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1434,"timings":{"blocked":621,"dns":606,"connect":1,"send":0,"wait":182,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/LazyImage-Bx9PcZlD.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/LazyImage-Bx9PcZlD.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1f35\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIvjCCNYmusdmQMhP1ji%2BOWfOVfH3q5oHTSN911EquI0py6mUXpxCaio%2BgWTHSKS8dni9NaTdEo7%2B4FRuWCSgrVELzlFxnGyMclGqWLoDgSJOrS6wuDuw2IuF42GpgOmvQoPq6Ct\"}]}\r\ncf-ray: 9e27890e0f951525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7973)","md5":"5e0645ec4004455824843f7eff8737e4","sha1":"69efdfbafd340ca6167b6a82596e657816f90f76","sha256":"9277e87d6dee332abd5103d89a968bcc98c4a9595c7b918b1ac6cccb4f3d3076","sha512":"c9e7216a74580652fadc869d0d178b4bbfc26bfc6dff532db7628c7531231b5c6b137c3530064108ab805f96d558ee85805cde4921dd949012853451d06da2d0","ssdeep":"192:/qLaMGj+jN9P52Icm1HlTG2PiZ3h2EYP8Fo4MY3s0oqBub1/4BSErnaYk0:/qLVBZGIcmRlT9PiZ3wEykol711/4wET","tlshash":"73f1e799e0a9d87ed5224083295ee049b93e1f59b90fc461f17c6c9ee250c06e87b3db","first_seen":"2026-03-15T15:24:57.158217Z","last_seen":"2026-04-14T11:06:51.958607Z","times_seen":10,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/xcicon-4f9ef520-8202-43f1-aaf8-e94a9e6a8da0.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/xcicon-4f9ef520-8202-43f1-aaf8-e94a9e6a8da0.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 64904\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 438dbd76b7130609c80d9a72b5c62a3e\r\nx-amz-request-id: 5f9fbad8-6e89-4f95-b115-f14ff31866b1\r\nETag: 0b888ab5f8588a0f8aa1ebca8771b8f4\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 14 Mar 2025 08:29:06 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":64904,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"0b888ab5f8588a0f8aa1ebca8771b8f4","sha1":"a054ff44d804489cd70a4bc33e7bb66b19c69435","sha256":"503fdf15f38d36cd9b1ec93c6267f1004587691bfc9cc9f5f3943e5830d9bf81","sha512":"2fda1b3a872364f5be4256c96d787241d04e9dfe5354d71148e395a02edd88c5d9b77326c8a1a083d0f0a053304bd9a4c227632740af4f0c211a90a8b2d01a26","ssdeep":"1536:+dG+UDMdk+XePkB72IyoriTaNIAYPQy9v4nfMLF2mCC2hJZXcE/:uG+FdkATBKoIMA9v4fwrCxhXsu","tlshash":"d45302aaf604ad57efbd203a24d7568fe9336c702390b6529bdbd90400838ed915ddb1","first_seen":"2024-12-28T01:14:11.250392Z","last_seen":"2026-05-29T09:37:04.397752Z","times_seen":239,"resource_available":false,"data":null}},"time_used":3950,"timings":{"blocked":1494,"dns":1,"connect":239,"send":0,"wait":241,"receive":715,"ssl":1257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/router-query-D7tBeB89.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/router-query-D7tBeB89.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1ab1e\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kGPRxXXzUOsIDGEbzoPATNuTssm5TBOSk4SDpHMK2nuf9qrsuTgqMVp7oRp60ueO0L%2BFxITkjO%2FTVsNp5cbiu6XWZ9U%2FnDq2Sz6PHjKnyKn0GtgilkknoN61ctbUDV3Kw7CiPH%2B\"}]}\r\ncf-ray: 9e27890b8b835689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53437)","md5":"c1016da93da75b8145b7f5a5c4b6dad1","sha1":"b2931142a71500f054184064ba021629ade287b8","sha256":"07cfda9307edd05f77a78274f28574f51ab4cb2e9515dc4018b516601146b8e7","sha512":"705d94b37733fa62fbeece196860c046c9e78e657e1b5b5c3d855e594ed29a3ef3757d4e5e48f927e2b0794981d93351559e0388abfff138e350b185e157a350","ssdeep":"1536:6R65ZhPxzG4hPeg45JlS8VcWd+eMAqdlHIooK82iL1qou48o991Y9X:6uZF0qENcA+eMJo0BaDY9X","tlshash":"3fb339e93193a2260af685e5d03f0115f1365e79300ac058b17d9fea796290fe1bbf78","first_seen":"2026-03-13T02:58:07.818671Z","last_seen":"2026-04-14T11:06:52.01781Z","times_seen":11,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/api/configs?platformType=h5","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /api/configs?platformType=h5 HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 1629\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 26 Mar 2026 16:02:28 GMT\r\netag: W/\"2141-+Ma1vPRSV5u8FXM9dM5DG7UKatc\"\r\nlast-modified: Thu, 26 Mar 2026 16:02:29 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nx-encrypted: AES-128-CBC:hex\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8513,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10d723b22d82db893592d6629e2b3125","sha1":"f8c6b5bcf452579bbc15733d74ce431bb50a6ad7","sha256":"a942659251097c5642db6c1b0b549fe68035afc29ff64746c129054e275b3623","sha512":"67e86518061699467e6e9a57157d41c09287ce9e38761eb3ce67a8b4587878d2d1b5b0704d817c3c86ddc67525833085dde3456e3e63321a563ea4de2cca79b3","ssdeep":"192:KJHmCwvDzdHGrUuYX5bMt71LqPFmFUaEGSWBAgtBjdGVrq9ZFTu9o:KgzDzpJIx1GPFmEkzFGVaZ53","tlshash":"28026dbd3a047ca5332e1b5ac695fccd173a0b234e4fa6c9d054bbc115a3b3a9d13859","first_seen":"2026-03-26T16:30:19.946227Z","last_seen":"2026-03-26T16:30:19.946227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/TY-150x150777-53494f6d-439a-4d2b-87a8-66b98ef630d6.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/TY-150x150777-53494f6d-439a-4d2b-87a8-66b98ef630d6.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 86993\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 7f4fb51f9dd144f8d6fc29dfc11cdd1c\r\nx-amz-request-id: d8b6abb9-b2cf-489c-a33b-0185dab339fa\r\nETag: a13d6523ea43d8362cb6cb86a723800f\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Thu, 01 Jan 2026 11:35:15 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86993,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"a13d6523ea43d8362cb6cb86a723800f","sha1":"4c3502e4ebed6fa56377944edf0211a2b5fe6d68","sha256":"a293c722e2b37d54d149674a8901b6868cd0a1b526770338bb835d992455f898","sha512":"c2feed8bc08f833a4684c91f22e0004123f09731c34046c022070fa4a388923113647b8fcda009132ed57d89aae308fd322046b06926dc6378030bc2c1b0b513","ssdeep":"1536:e11yCSYz1yCtrbp1yCSYz1yCHtUJTAwr7VDqC3iR+RV8SBctUJTAwrDzVDqC3if:ex9tN9NXwr7VtO+RVFaXwrPVtA","tlshash":"3983010bd11abdb9acfe83556a1f2c81c37215c8dac8886104bbf64278720ff5546dfa","first_seen":"2025-12-16T03:23:53.258175Z","last_seen":"2026-05-29T09:37:04.362016Z","times_seen":326,"resource_available":false,"data":null}},"time_used":2326,"timings":{"blocked":1450,"dns":0,"connect":0,"send":0,"wait":295,"receive":581,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/71_icon_150_3721-fe5c9aef-369a-4333-864a-cfdd11a49e74.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/71_icon_150_3721-fe5c9aef-369a-4333-864a-cfdd11a49e74.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 115599\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: ad69e205602b65aea3deafbc599a8c86\r\nx-amz-request-id: b9f662e6-e711-45d2-aaca-85da2ff6dca6\r\nETag: b9163504ac9b24521e4826cbadbb3879\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 24 Feb 2026 07:28:09 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":115599,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"b9163504ac9b24521e4826cbadbb3879","sha1":"82753bf7e2917041a42d253a68d72b26fbd335e9","sha256":"33be9d1c91bfab909231705e074dd01427749b9540a8045fa7eea221626801dd","sha512":"b21a444e3ae17bde9ab7e811c371ddadcece08d62115659b5f327751793c9589b49ee712bdae5ab6f765f5899b5ff3e4e6a24012bc6618b2d8a6f197721baa7c","ssdeep":"3072:ICrotr5CBpsJ/eGVmvYfWhg2bu3Pf4zXQ8CpTy:Ytr5CBuJGGKYEg/33ZJ2","tlshash":"81b3125fe0ba68aaf83c237220953ae1964de7d485950c945ac5f81f9f601f0acb3762","first_seen":"2026-03-13T02:58:07.84437Z","last_seen":"2026-04-14T11:06:51.940179Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3191,"timings":{"blocked":2288,"dns":0,"connect":0,"send":0,"wait":229,"receive":674,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/arrow-left-CILfl94b.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/arrow-left-CILfl94b.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=07TtVLaHFd29Ccau7DWfWQa3XKZl%2Bncmd7pqxtrdGKfvmMR3hiZycT2Nd%2B8ffAfIruDW2LgOmsu%2F9LSpGRTcGxnlieMZUg6yntNNHWDc%2FB53jBDbQ0wW4rfwj1MeJlvbWAnt6Cwu\"}]}\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"69b3e324-152\"\r\ncf-ray: 9e27890dff921525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"78a2c2b826f8264363f0bc15f2b1442b","sha1":"181708467e4b3662cb8d5583fdc1917ab149c3df","sha256":"56a17e57a0eaa202756c28e92daa06dc7b91c253c87e0254fe3b0d998308074d","sha512":"79478ca5f053af11779530ccbee50369c8e28cc0c71dbf0e4973742ce1e7426929892e65c4537adb9ccf8461e209e2c4fa3a1ff49861fcb6a4ef14d42da71596","ssdeep":"","tlshash":"34e0266f298012b3027184781b0fe5ca564815fc836fb650b40243698a300bf46dde90","first_seen":"2026-03-15T15:24:57.109514Z","last_seen":"2026-04-14T11:06:51.93462Z","times_seen":10,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomePage-lUoZUyJm.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomePage-lUoZUyJm.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-3bee\"\r\nexpires: Sat, 25 Apr 2026 13:28:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 10845\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIaMUYgmpcRQAF%2BIViC2%2FTKcC1uQwcvGfgYSR%2BfUpL87MzT0um0DwMLPKq%2B6yD%2B6e0QhhgOloktb8u%2Fx%2BV5WRGwxuFPlKiBC9fSAYjgxdkMyyeKExeL%2Fg%2B9X%2FgGYk%2F30DVSg%2BrXZ\"}]}\r\ncf-ray: 9e27890eefe31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8938)","md5":"89af59a7f710b5b6060db2dc60faaaf5","sha1":"394387c5f532e8e47862cb6046837d5b5bb1d693","sha256":"bddf7bbb10ccd6a4c65833586acd209cfcccd56ccc143949028db6f54b02ea57","sha512":"db59a040286481a54468c0ca49c8c491bc8fa3af6313b3142ab409e9399bbddf1a4fe141f152d0c8b7ae8006a1faaf21c4b7083d1ff5e33266a804e2a8ad4c86","ssdeep":"192:r7pYEsOY8PWuw9J3bKZJGUpwQD/wPRORpWM1fM/9ptvhORTp0ksf2YjJi16+Ct2q:r7pYEsONu9JgpwQbWJSEdJn+Ct2mVDd","tlshash":"4262541ef013dabed9f608955d6fb8483c065f44ca2e8491f07eaa1c0620c6f765a7dd","first_seen":"2026-03-15T15:24:57.107443Z","last_seen":"2026-04-14T11:06:51.993011Z","times_seen":10,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ScrollToTop-8oDbSTbW.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/ScrollToTop-8oDbSTbW.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1a75\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aq0z%2FOvdDkm51y0YhZKRKaU%2FtmxRgW2Yu3O2iwvGhFUX3G6W6jWvDZEAoOK28YxQK5eftxhQckoN0oungKhcB%2FQklFh%2BgOlrPxXZGOOZPyq3MnchKmSQpfKeEUIQbJsTd2U%2B3zWZ\"}]}\r\ncf-ray: 9e27890f3fe81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5876)","md5":"a994c4d0d57a101e2087abe71f849414","sha1":"857d4143e05e4c8199661eed23c6665b61f9c495","sha256":"5710cb144b303932368ccb6f2cf6463bf683212b5f02923127fd068b73601116","sha512":"d06ce31f4391f00f3b768a7de2fa2dd2ca2d9b803364cbcfd8a58df489e074e9e017d0d1a98062f2a796d067abaa092eebcc411c707be4218234c456e4d52908","ssdeep":"96:jIZ7RMFjOB0OhJqGqQFqF2GtRyzNfuBPzGoBUmimo8LONSL9qstLAStGKjWeQyHY:C7oS0Yr3FqsGTxGoMSL9lLttjWeQy4","tlshash":"11e1f99ff141ec35e4e706963a4fe68930203b84fa0ec485f17d5cae2921867c30699f","first_seen":"2026-03-15T15:24:57.181896Z","last_seen":"2026-04-14T11:06:52.010913Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeCarouselBanner-BVCUmd_w.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomeCarouselBanner-BVCUmd_w.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-85d0\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHBbl1wtHmteK1uLYYqj03iX1wmWEogaNIfTrByu%2FPpHuO2IdiRGjxmj2uUM6Ug%2BI3X1neKzVYrTGnmmfZ8acQckjSJoKxvStxKHNbRrCpY5QdnrU4bsB%2FL7COdO2xsCc%2FdSL8oA\"}]}\r\ncf-ray: 9e278912e87f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34255)","md5":"3d8354f2b4d7fd8b6e8d31715bd802ad","sha1":"53914208042393dca4cb62d36c08182f9677d436","sha256":"cc16744e57c4d2cc5083536d3293f5eece22a2b508f43ad704e77097bb2d8563","sha512":"8953f76e25977ea802e59cae5ea5ba72e928abc4d2622a84e1b006c7c246320d8141f47f09a613ef412cfbdc56a4990575a570215256cb9a58b3bd5ec627970a","ssdeep":"768:475XylA6wgkfVwNfkoLzqmEt8/d5MXOGVPy8YOvQxIy2nFAGqHSxf8A5ZpkHoQWR:UXiA6wgPnd6vxv81V94Z2a","tlshash":"6bf20ac96124b5b586ef09eb42f98554a2711404f00de6a870fdcdad92bdd880367ffe","first_seen":"2026-03-15T15:24:57.116129Z","last_seen":"2026-04-14T11:06:51.927141Z","times_seen":10,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsBanner-BeuKxqmv.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsBanner-BeuKxqmv.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-e64\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqpzKatxo8pxiIc0Ha7WUeFdWiPgOK85l2KujCUDHceZOFj4HoE6iY%2FhvsxB6CQJ8JN42K4IAec%2FRE9W5v5%2F4CLqJtHcm9WFp85tdauJmnvDgX9OHxhIEOtc8lrSzO0mQ5yHkq%2Fc\"}]}\r\ncf-ray: 9e278912e8801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3677)","md5":"629de7f9adfe69f7782909db72c011d0","sha1":"a5dedbdb3638fcac49b9f1e3aeade14621426cd3","sha256":"1900ff0169753d9e2c46e95841bae89a089aaf7aceea727a89d798c9342f4e53","sha512":"2e6d0d62e1125fffb3e33331f596d8087993b2c5a5f0cc8637c1de01e9dc5b11b45c072d305d511610ae3784a1781a0f29ecb44d631d32e2822a02e51e9be442","ssdeep":"","tlshash":"0a71850de107cafdd8f318d06e9fa88478155f14ee2fc946e1aea50e1750c36d92a39e","first_seen":"2026-03-15T15:24:57.083778Z","last_seen":"2026-04-14T11:06:51.925682Z","times_seen":10,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tmzyz.com/vod/ceebba39-a545-4969-9bc4-3ff6b4e05393.jpeg","fqdn":"img.tmzyz.com","domain":"tmzyz.com","tld":"com"},"ip":{"addr":"104.21.56.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmzyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 11:34:38 GMT","end":"Wed, 17 Jun 2026 12:33:08 GMT"},"fingerprint":{"sha1":"E4:72:88:DC:EF:78:F5:1C:54:DB:3C:2B:90:8A:A9:F5:BB:81:D6:62","sha256":"80:8E:7B:41:8C:ED:57:84:6F:A8:06:15:AC:C6:9C:D6:51:30:8D:D2:05:40:43:47:71:8D:7E:26:B2:51:EB:C4"}}},"request":{"raw":"GET /vod/ceebba39-a545-4969-9bc4-3ff6b4e05393.jpeg HTTP/1.1\r\nHost: img.tmzyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 17 Feb 2026 13:23:56 GMT\r\netag: \"1fb5f-64b04fbca14d0\"\r\naccept-ranges: bytes\r\ncontent-length: 129887\r\ncontent-type: image/jpeg\r\ndate: Thu, 26 Mar 2026 16:29:46 GMT\r\nserver: cloudflare\r\ncache-control: max-age=604800\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDjihH74M2gswvd%2BXT53vnt5V5EiHSrCCM8VjFalTwuGSQebTS44%2BZVmz4Mk5NDUQ4vH5fqA200rLCv0yhIHBBWLCzkwmeLbIIumIaFgqf1UfViXHe4IvmfzjjAhl%2BXG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e27893a6ae4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x608, components 3","md5":"346dbf42fe39361039a4b94db70aa53b","sha1":"93a8d1dc0e51f0d3f139b9a007a8a3b5424cfbdd","sha256":"95ba54e177e1fc01d123ec57b630b6ef2d66922ec3577ed95f99b4c9cdc9c30e","sha512":"639c58fbb891f14de73f54517f3a621ccefa37eea84e85101429162e2a71b2b5fa5268956b1c19ed143bc528be3d8cbe911928ed5a9f74ef2996a8aab5c71b3a","ssdeep":"3072:S75ltPKqc0nYmLlrZInAQxogniXU7Xf1A560SmWXRWou:m5lIQYmLlmJxo1KXtA5mmEpu","tlshash":"fdc3123a2b18dbcce7bf39f9f5c05f3b2699fc516c51d26970e1a12a71c2118c8b19a1","first_seen":"2026-03-26T16:30:19.957132Z","last_seen":"2026-03-26T16:30:19.957132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingest.twlrih.cn/sdk.min.js?v=4547234","fqdn":"ingest.twlrih.cn","domain":"twlrih.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beabox.live/","date":"2026-03-26T16:29:36.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.twlrih.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 11:03:39 GMT","end":"Fri, 29 May 2026 11:03:38 GMT"},"fingerprint":{"sha1":"95:97:F1:35:17:DC:65:52:43:F3:68:81:49:CD:EE:36:FA:1D:CA:E0","sha256":"22:3C:2C:12:AB:58:FB:76:97:5D:92:9E:CE:3E:24:2F:4E:70:25:75:B4:64:00:E4:A7:46:11:57:41:70:25:9F"}}},"request":{"raw":"GET /sdk.min.js?v=4547234 HTTP/1.1\r\nHost: ingest.twlrih.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beabox.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T16:58:33.431617Z","times_seen":15878056,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":400,"dns":76,"connect":162,"send":0,"wait":0,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/router-query-D7tBeB89.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/router-query-D7tBeB89.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1ab1e\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uox0roJYqvKdPpJSJvgfLijb3qNJHEhl3O5DzuJSkEfQimac%2BfmM0A8PJCCdIeoRmsuAlMT7FqeJK8raAC8t%2FqsxDNnH0Eamtx48%2BihSml%2FtUhLENI1itzf8T0GzpvtH4n9EIt4\"}]}\r\ncf-ray: 9e27890d0f781525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53437)","md5":"c1016da93da75b8145b7f5a5c4b6dad1","sha1":"b2931142a71500f054184064ba021629ade287b8","sha256":"07cfda9307edd05f77a78274f28574f51ab4cb2e9515dc4018b516601146b8e7","sha512":"705d94b37733fa62fbeece196860c046c9e78e657e1b5b5c3d855e594ed29a3ef3757d4e5e48f927e2b0794981d93351559e0388abfff138e350b185e157a350","ssdeep":"1536:6R65ZhPxzG4hPeg45JlS8VcWd+eMAqdlHIooK82iL1qou48o991Y9X:6uZF0qENcA+eMJo0BaDY9X","tlshash":"3fb339e93193a2260af685e5d03f0115f1365e79300ac058b17d9fea796290fe1bbf78","first_seen":"2026-03-13T02:58:07.818671Z","last_seen":"2026-04-14T11:06:52.01781Z","times_seen":11,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/useScrollHideNav-BiyNAyFI.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/useScrollHideNav-BiyNAyFI.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-5ff\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BTZIY5nyeX9c0d%2BM7DaJFcI90vr4n9u%2BiW8jtutK%2F%2BLNLMVG9Vyrw100tnJ1FbJRlBirE08qK0CYKqNTGsS54Rc9GnvjEKDV8Uaxf%2FLzB6cXUXGrTTqx%2BQXtrWE13TsZptR9SpR\"}]}\r\ncf-ray: 9e27890e1f9a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1535,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1518)","md5":"629e6ddaea1779a8891215f0b67ff76e","sha1":"07d3bca12a2a53ccaa0c78d2b8552b24350f441f","sha256":"d490190071c87bcaa3f51f9e61533e96abad3d0840609ed0d07427d51adc5e9d","sha512":"2d64e8b36dabe883426ae1285a19f0ee14daceb851237ddd7418700e872dd897e18b6ba13a6a10a9b2e1f66965e174c767f13381da5da147ca9dd5304d037f90","ssdeep":"","tlshash":"8131ac90a4d25abcc6ab06c9d33aeffe33777fc2b0589298c41d1c349199992d0645f5","first_seen":"2026-03-13T02:58:07.848864Z","last_seen":"2026-04-14T11:06:51.966911Z","times_seen":11,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/68_icon_3721_150-daf45ce9-6c86-4d46-b2ae-1e1a217ce80f.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/68_icon_3721_150-daf45ce9-6c86-4d46-b2ae-1e1a217ce80f.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 204251\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: ad69e205602b65aea3deafbc599a8c86\r\nx-amz-request-id: 19b7ef89-ce44-497d-9b45-280bdca87487\r\nETag: 6cb91903f7fcd27e9f2451967419699d\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 24 Feb 2026 07:26:26 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204251,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"6cb91903f7fcd27e9f2451967419699d","sha1":"2826d0b99f89b637db33634be3773f157f19b09f","sha256":"7e688be86928dfabac243ccbcc5ada44d5081f51364af893fa0165d1c4c21092","sha512":"3e34f9681cd3442ea4b3befefca8b25400e8057794911b2eb549111d22066b76d5894d737c7e5703a1e0a34cbf2b315916a93b55fb3a827b683c89908928f4a2","ssdeep":"6144:q8QsPE2Lj/yCYT+MOClBr1BFosrbpCfbrja:PQsPEUjqCYT+BYBr1BFoOQfbrja","tlshash":"231412071261da92e06e129b1831bdcde4bc94e98db8c93bbc9cfb5df521a3d148d391","first_seen":"2026-03-08T18:58:04.281634Z","last_seen":"2026-05-29T09:37:04.335318Z","times_seen":28,"resource_available":false,"data":null}},"time_used":3048,"timings":{"blocked":731,"dns":1,"connect":225,"send":0,"wait":228,"receive":1346,"ssl":514},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/20260313101247/HomeMenu-Cwa-UX_Q.css","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/20260313101247/HomeMenu-Cwa-UX_Q.css HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmqAwoUYz0RAyZAW1SQTgwVTmprNvR6nxQupWDjJPSYzSM8qQ8TK1IUGD1HQ%2BhKzSj3%2BNGycr2oTi4%2B8IH%2BLyuaytx7WLTFq9XtXXqGR%2FL%2BR2iJoAoKjkZQ6CTJVDbf%2FYKlu5Ray\"}]}\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"69b3e324-308\"\r\ncf-ray: 9e27890dcf891525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (775)","md5":"83bf514a543d2c5e99f6047bb3af1b30","sha1":"3a612cdc22225e44fe6863dc2674584d2fb94728","sha256":"d3cadbbe87a7ceb70ed53c2bfa3f3c849ae7071af172df7b73229d3c4f5378ad","sha512":"79cd46bc6046994155b24d063e892e482bd3d45de98572c0ade330894cb5d5e75b74323bc714c81a2dd719a6bba413ceb7405afc2aaa52d8ec4d62ce662f5c1f","ssdeep":"","tlshash":"5f0142c88b65045841864381b9c0ea74077dcad2f5735ccf33f54c4e47001b953dba65","first_seen":"2025-09-10T13:21:03.832486Z","last_seen":"2026-04-19T14:03:43.183057Z","times_seen":78,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/VodGrid-D_aALlDi.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/VodGrid-D_aALlDi.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-d98\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wY9V8kAka0aAVxTskptgVP9stJi1ROnEfcSQPvCdGm1WvFF3R4DxTraFd0xaWN3ZYIxveLG93t5najxIRf7ig3%2BsidF1I0FFzEgelZ6SjNk3wOR336bbPudLaNx2YMBIDVYl59J\"}]}\r\ncf-ray: 9e27890dff941525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3479)","md5":"cd6dc1d66376dc4b9c72c52c933dfff4","sha1":"852e06ef3a8d2e4c42be731fdd4194e453a05ca0","sha256":"005924e85fcbe361495ec6d35a862ef8364624edd1b3ce5c38ed88a463bd09b9","sha512":"74275633d3e59977292b6fd308c506215fc03e2f272723678173d756a7be187b6ee09f9f8d93bdd9bd3dc6c98bf7fc8d937530c113850532894af364e63a5516","ssdeep":"","tlshash":"b671a81de003aafdddf719e958fe54043c098e15db6bc4c1b079b90e1669c132a637c9","first_seen":"2026-03-15T15:24:57.070532Z","last_seen":"2026-04-14T11:06:52.012016Z","times_seen":10,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeMenu-OAaEPRxc.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomeMenu-OAaEPRxc.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: \"69b3e324-1e94\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMoUxvZXeESuyRvfeTMpL7AwtVrorV8%2FE5c5RHCBSrSaUC5%2FaAR8ZcNTNahrk38E%2FpqrUUpq4eW6n9%2B%2BnI%2BmvaRTAkZFPlCcOlqHFqUpLwG%2FgNgjLgii74eMC7UaYJFcl2L3c%2B%2BU\"}]}\r\ncf-ray: 9e27890f3fe91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7828,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (5945)","md5":"582d5a70b090bd1cd1d73c2be62e3394","sha1":"d369182895979cf88370c9fdf2301eb2e24ce1e1","sha256":"f5c385f4c5a398469f9b1278caee5a8b34463e536b2493aebf74bd3e19ee020a","sha512":"803df2da82e5db4acce09b0f7723d45e28e5026daa3cc12db6d576760f3cef3c3e396a488d5bf405be3ad6213146b7607b15c9da0b1cbe4557c1b8c02f73d9b6","ssdeep":"96:ciFx4jX9C6gM6D3/HvaYPn2Bd9TFdkfltf0B0kAnXQzhWEAn9QQdRNeBIEl5nbvX:lKizvRf2RcLUzgEAn9QQdRit5rmQ5x","tlshash":"2ff1a41ee102abee51a789d5165ff44c7e1d4a58ef2e9060b03bf90c07a1c6e7667bc0","first_seen":"2026-03-15T15:24:57.108511Z","last_seen":"2026-04-14T11:06:52.004471Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/BottomLoading-kZCn9SVL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/BottomLoading-kZCn9SVL.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-5d3\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IT%2FfgMM6%2FIluqr%2BFp7waBj94cbmLi%2BnUdXTmhbF8Jz3ddPCo0NmjPLrp1kTSQ8ZgfnWqBVfwYO8%2B97KmKb7%2B4ZSLoBXlMECstMPklA8QO76QpXNAh20K%2FmZQxhPqTXGPn57HeloW\"}]}\r\ncf-ray: 9e27890f6ff81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1462)","md5":"4d2f14d6031303c140c6f46c402480ae","sha1":"2b76da991144634fe362a87608d5b1b05550ee5d","sha256":"00dfe14689ad055ff202b2ba067a0a977f8b28811985f1b617b98f05def94988","sha512":"6d65a54d7013ea0b090f69e7fe1bdaf5772b49936ede5d2e76514a5b4e4f1856cd78be7faf69ba3798f964d1fc9ddefef2307616f6274ae2278ebaa99855068b","ssdeep":"","tlshash":"6731e11ba003a6bc64e726665b7d5c01a805cf54da1b8c18a07e981e5459c2e3d732ca","first_seen":"2026-03-15T15:24:57.114904Z","last_seen":"2026-04-14T11:06:52.013005Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/icon.webp","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /icon.webp HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 1786\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Thu, 26 Mar 2026 15:51:25 GMT\r\netag: W/\"69b3e324-9fc\"\r\nlast-modified: Thu, 26 Mar 2026 15:59:53 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, memory\r\ncontent-length: 1225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2556,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"26dbdd38d47fd1bf83830daad32fc39c","sha1":"2c8f847231e331fe71006744db35797045f16fb7","sha256":"bf64cce3fb1ebc4e76623645e638537cf777846b4624dc53a4d07ba789df0b2d","sha512":"5911e12bd0b9810f2a603d1093708222a66397822ce7161678922742fe51656d74532c6ab0e97c89ca2ed364eb3bed2158acbb87b6330c3560bfc64eed5668c0","ssdeep":"","tlshash":"a2510067be418962a71642d2bef2f409a157f18b05d584dbb4ef20743b80be18e43d6d","first_seen":"2026-03-15T15:24:57.131306Z","last_seen":"2026-04-14T11:06:51.946696Z","times_seen":10,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/72_2_PG_KY_icon_9981_150-7fd71d15-73c6-4fe7-b928-106dcc5a206f.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/72_2_PG_KY_icon_9981_150-7fd71d15-73c6-4fe7-b928-106dcc5a206f.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 95453\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 438dbd76b7130609c80d9a72b5c62a3e\r\nx-amz-request-id: 321f57a7-5a25-4654-a121-bb1b90e06789\r\nETag: 2f4e6a0dccceed456f3b280f7097d822\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Sat, 14 Feb 2026 10:09:27 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":95453,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"2f4e6a0dccceed456f3b280f7097d822","sha1":"aec9bf1c5917259224f61fde97376cda4f4ef994","sha256":"7f964141c0a68bc2d7a1ae7d31e49e2655ce7cfe4f1008a32caf6fe545285e7b","sha512":"4d8bdb4796139acf10eca232b9a5836618b04ec8384fd89f146dcd32dc01e0738f8dc228d0314557af5eca91145f703d5dd0c8a5f8fe3230d79a9c187ca552fb","ssdeep":"1536:twen3gHEleQQlNSLjJvJ4Iv2E4INgSEAO9Z4/5SUBEqHISMOzUC93luyKyeKOhPX:yq3gkgQQ6FSGhOSEV4/5SUB9HaCTBKyI","tlshash":"6c93022d4e3a8c54d405eebd2ebb3969b4223ff4d644c46a99c0fa0cb2d293d8516d87","first_seen":"2026-03-13T02:58:07.82676Z","last_seen":"2026-04-14T11:06:52.014249Z","times_seen":11,"resource_available":false,"data":null}},"time_used":3649,"timings":{"blocked":2434,"dns":0,"connect":0,"send":0,"wait":264,"receive":951,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beabox.live/","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"23.224.71.91","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T16:29:35.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beabox.live","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:78:6D:1A:EF:03:82:1E:89:8E:50:71:D9:80:4B:0C:AF:B8:E0:31","sha256":"3A:99:F6:78:21:C9:B8:3A:86:0D:55:79:46:43:49:B6:90:B8:BA:FB:38:95:30:4A:72:C6:6E:6A:3C:03:FC:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: beabox.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Thu, 26 Mar 2026 15:51:52 GMT\r\netag: \"1774540313\"\r\nlast-modified: Thu, 26 Mar 2026 15:51:53 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15194,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (410)","md5":"ccfa7b65d665cd2df866babbd0ca647a","sha1":"10ee0cfdffbf20c96ffd6f9c83847cd775615f00","sha256":"e794e8751c0a8f3d9816de620c614d695ed16cc47a1b48f31416687cf231afc3","sha512":"ac1f2b86a5bc7476dd0a1c21a2352979a34d0a10190fdf68efa5a6441536132371c3186ae13857b03c511cfc5acccf438846dd2e30b8db96187ce9f9c4254459","ssdeep":"192:sexnJkArLTPK4v/3nLhOcW66zEaiS5aoIPC+CJsEAzDpGmcv/OOGvUSW63JN+P7U:XxnJkmkdoRza/kh63ru9BBlfucCfM","tlshash":"8a62b76a16f30075621791aa2bfb930d3770e017640bcc953f8d93884f86eb5d9a7bd8","first_seen":"2026-03-26T16:30:19.964997Z","last_seen":"2026-03-26T16:30:19.964997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1270,"timings":{"blocked":530,"dns":17,"connect":207,"send":0,"wait":210,"receive":0,"ssl":301},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"beabox.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GEY91XQ7RC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-GEY91XQ7RC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 16:29:37 GMT\r\nexpires: Thu, 26 Mar 2026 16:29:37 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153829\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462032,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"7a2f81be302c95ec5d509fe1efd813a9","sha1":"48b83e034523cc09897e868b9505c352a591919d","sha256":"c6a17dfed07e63537a5f2b1e9188832facab7552b5e589a0419d34d285cb450e","sha512":"a96087f9f8d95349b7d0d8f16d6647aa7c7685e843e30128f5a7bb6cf51782bc89854d187ee5c33fe5a4289dd253500a202cf05c86d0bae2cd29a11b7b0d17d7","ssdeep":"6144:+VOK1WsG4ohSGZckTv8wRXpQm6CKqA8BK4yP8NHoZb:cmsG40SFkL8UG","tlshash":"3fa4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-03-26T16:30:19.966717Z","last_seen":"2026-03-26T16:30:19.966717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":59,"dns":1,"connect":8,"send":0,"wait":20,"receive":27,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajgvkj1jsv.shenglinyiyang.cn/files/671713e14eb9a/countly.js","fqdn":"ajgvkj1jsv.shenglinyiyang.cn","domain":"shenglinyiyang.cn","tld":"cn"},"ip":{"addr":"54.240.174.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.shenglinyiyang.cn","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:E6:CD:56:A1:09:AC:96:E8:A6:84:C7:BF:07:DE:D2:DA:25:A0:8F","sha256":"00:D7:F1:17:6F:58:58:A9:B6:E7:BB:90:95:FF:A8:A9:45:78:0E:09:65:E6:85:4E:70:D7:31:42:29:57:CB:31"}}},"request":{"raw":"GET /files/671713e14eb9a/countly.js HTTP/1.1\r\nHost: ajgvkj1jsv.shenglinyiyang.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-length: 878\r\ndate: Tue, 11 Nov 2025 12:30:27 GMT\r\nlast-modified: Tue, 22 Oct 2024 02:54:26 GMT\r\netag: \"db2317b980affeabfe86236be1eb68b2-1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PYmbbUMtbfpau5vURFi87q7bWTehb5jWjqgTSSwTJEAV5SnCOIouvQ==\r\nage: 11678351\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2b4be2934ca03b7de88b5fd819bd0f2e","sha1":"d7d754cad678f6937dbdb8be99eeb01dfd630344","sha256":"2d55d3669fe0bfaa9239f56e754e526f94f637333bf3ec4a861fead36c909914","sha512":"3f4cf228b69ff5662a5b3908162146adbef42c16ed1c6171b9c23aff66212537a19d927df1b55373509bc524613180d070c468b9806c4b025e7061a8a6fc99ed","ssdeep":"","tlshash":"4011291cdce76136b42790b9fa7ae5283ead95131c5ae8057accc5684f60bda0c24a88","first_seen":"2025-05-12T01:53:14.353294Z","last_seen":"2026-05-15T20:33:51.148508Z","times_seen":211,"resource_available":true,"data":null}},"time_used":1814,"timings":{"blocked":902,"dns":405,"connect":1,"send":0,"wait":2,"receive":0,"ssl":501},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/VodGrid-D_aALlDi.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/VodGrid-D_aALlDi.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-d98\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBUzpUtjbASFsFQdCMRtQ0wfuu4X41O%2BVPLRJmrlFrvktmaQrU2ehFqL4fsNzZZc1t7acF92vcbSzZe9zvSB5%2F%2BpKA0dM7XbDKx8fthMt36cALt3pAlB34UbjEfuP1QVqGzTHG95\"}]}\r\ncf-ray: 9e27890f5ff21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3479)","md5":"cd6dc1d66376dc4b9c72c52c933dfff4","sha1":"852e06ef3a8d2e4c42be731fdd4194e453a05ca0","sha256":"005924e85fcbe361495ec6d35a862ef8364624edd1b3ce5c38ed88a463bd09b9","sha512":"74275633d3e59977292b6fd308c506215fc03e2f272723678173d756a7be187b6ee09f9f8d93bdd9bd3dc6c98bf7fc8d937530c113850532894af364e63a5516","ssdeep":"","tlshash":"b671a81de003aafdddf719e958fe54043c098e15db6bc4c1b079b90e1669c132a637c9","first_seen":"2026-03-15T15:24:57.070532Z","last_seen":"2026-04-14T11:06:52.012016Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/LazyImage-Bx9PcZlD.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/LazyImage-Bx9PcZlD.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1f35\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaeoJ2FIoYF37CwEKhrTBuU7G731LXqxDDqTjYVaaIuCS2xyDSifAGKkkH5jf5hdrQrRnWp4BJXEZyuwPms7U%2BCYcq6MQzqxfqnGv358gdrgkLeltHN%2FygMpewxoOVFwp831qSbo\"}]}\r\ncf-ray: 9e27890f7ffe1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7973)","md5":"5e0645ec4004455824843f7eff8737e4","sha1":"69efdfbafd340ca6167b6a82596e657816f90f76","sha256":"9277e87d6dee332abd5103d89a968bcc98c4a9595c7b918b1ac6cccb4f3d3076","sha512":"c9e7216a74580652fadc869d0d178b4bbfc26bfc6dff532db7628c7531231b5c6b137c3530064108ab805f96d558ee85805cde4921dd949012853451d06da2d0","ssdeep":"192:/qLaMGj+jN9P52Icm1HlTG2PiZ3h2EYP8Fo4MY3s0oqBub1/4BSErnaYk0:/qLVBZGIcmRlT9PiZ3wEykol711/4wET","tlshash":"73f1e799e0a9d87ed5224083295ee049b93e1f59b90fc461f17c6c9ee250c06e87b3db","first_seen":"2026-03-15T15:24:57.158217Z","last_seen":"2026-04-14T11:06:51.958607Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/api/vod/latest?page=1\u0026limit=8","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /api/vod/latest?page=1\u0026limit=8 HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 1260\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 26 Mar 2026 16:08:39 GMT\r\netag: W/\"19c1-C+YfBfQ6ts/hs0adacdoOclMMHg\"\r\nlast-modified: Thu, 26 Mar 2026 16:08:39 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nx-encrypted: AES-128-CBC:hex\r\nx-powered-by: Express\r\ncontent-length: 3837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6593,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9568f444e3818046ed2a36ecbf08ea7f","sha1":"0be61f05f43ab6cfe1b3469d69c76839c94c3078","sha256":"c83442a679ad32103c9c0c49b336a9a07619769db4c13636bed7d0730b3e75db","sha512":"79a47b21322e732515aab4246fc1f0871fd8aaead2d623ef208994c7e756b140f16e075df5cced16060343c545ada497b9cb2218c5010aae0975da6707025984","ssdeep":"192:KJcs05k472wD17zS148xibHFyYAEcRuMI9:KqU4hde1SAvw9","tlshash":"1fd14cfc690678a5227f5a2b5d56ed9842b36603f8b380d502f2e3c70e32f25de4186c","first_seen":"2026-03-26T16:30:19.96924Z","last_seen":"2026-03-26T16:30:19.96924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsPopup-CRQttAJQ.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsPopup-CRQttAJQ.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-3245\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKFqe6GeYTCVci%2FSWTveF3kjfMBN0FREeFCvMY%2BI7i5VpRz7ZkyxDR3OTsaCTMrEDSYRlWQ50BptbkEYef3A9sA77YBkjvpy8wxLx%2FAvWDUe5GRyIEvKYMADFOUv9luqYIxt5KWk\"}]}\r\ncf-ray: 9e278912f8821525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11268)","md5":"e9b3578dd31474af9c259f3c363bace4","sha1":"bffb49cb7a42c8cb6275b3951c5087fc8794ebd0","sha256":"7b2ec247101e98860c557b29759d32f0690badeecb8c7bcecbc58647063d5ee3","sha512":"cbccee1bf9d2ba596208f041273dd74b4d056fe157fc774a68ae00071c57aa7846e2222807ff918bc340426571d4e7cad8e4f1c4d3c07b5acc7b0cad11277dc7","ssdeep":"384:HloV7aUkZZoa1duUc7FQlKBEqul1pzN+xr:HloJaxdDuU2FuGf2fzN+J","tlshash":"624229746082a97dc6f241c5666f5a08f4165f14f91f88c4f27d9c6b3b00c1796ba3f6","first_seen":"2026-03-15T15:24:57.149177Z","last_seen":"2026-04-14T11:06:52.023342Z","times_seen":10,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh3hfnb.xmpusy.cn/web_resources/2026/03/26/42/2d0d67e3-3fd4-49af-ab9e-f5d8250603fb.txt","fqdn":"fh3hfnb.xmpusy.cn","domain":"xmpusy.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.841Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /web_resources/2026/03/26/42/2d0d67e3-3fd4-49af-ab9e-f5d8250603fb.txt HTTP/1.1\r\nHost: fh3hfnb.xmpusy.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T16:58:33.431617Z","times_seen":15878056,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beabox.live/favicon.ico","fqdn":"beabox.live","domain":"beabox.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beabox.live/","date":"2026-03-26T16:29:36.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beabox.live","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:78:6D:1A:EF:03:82:1E:89:8E:50:71:D9:80:4B:0C:AF:B8:E0:31","sha256":"3A:99:F6:78:21:C9:B8:3A:86:0D:55:79:46:43:49:B6:90:B8:BA:FB:38:95:30:4A:72:C6:6E:6A:3C:03:FC:3F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: beabox.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beabox.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T16:58:33.431617Z","times_seen":15878056,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"beabox.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ui-vendor-DHDowlb1.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/ui-vendor-DHDowlb1.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1bf9f\"\r\nexpires: Sat, 25 Apr 2026 13:28:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aeov6LoRagjaAyqTx2Rd4OV07UD9SQfIBYMnyAE4UjVqjVzkFMjQmvcMjEM0tNu98PH92%2FzeX5F2RfOno8XS%2B%2Bu1Tx3nHiCK30xDeeW2thpkFHExW7RBR5W7tGpG%2FRbOBGseeTyx\"}]}\r\ncf-ray: 9e27890b9b8b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5201dbf7ef60ac7bab3e780fd7278c8c","sha1":"cf3b2d845c9d1b3e6d5b1ab316af104121cc8885","sha256":"67bb811b766d4c8b29cace6207e00988ef811c6a7c8cfc6eb4a49844e70e83d5","sha512":"ff3be56fdd5e0c291579fbeb3991c897e9506bc17a304f660c8de73b8e9d79aaa6bcf8a6bf90db7454d9faced05e575adfa06e29fe62b2731778b0b3f4a18813","ssdeep":"3072:7dHTzTletONA7odgnVxPkN9gkDlxw4mV2Q:hHvhetONA7odgnVxPQykDlxwnV2Q","tlshash":"9cb338c97161b57683eb4aca92ba811173760950744ec4a0b1bc8c6f287a94853ffffd","first_seen":"2026-03-13T02:58:07.82805Z","last_seen":"2026-04-14T11:06:51.95427Z","times_seen":11,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/Header-nNF6SekL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/Header-nNF6SekL.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-ba7\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xY8u%2BNBgHpT9LoXJ3HGicx%2FFqjWS38x8PYFEBrU8IpzeijnbVEp%2Blz6N3sSX9Rjl%2B2p297F%2BGA4B5SYAxJVyw6tublwfEA50gMlfb9DYJ4K8rc687qXK7BGzU8tgxaSFio22mG1O\"}]}\r\ncf-ray: 9e27890f4fea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2983,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2611)","md5":"a6b6b59adf4ccda5723d6b46af87609a","sha1":"c4e424f76c15295411308d36463692905a564079","sha256":"1531655418b0904199bff9f1c47c8925bac5662e00360361fc0b34859989cf8a","sha512":"ce5089b6900396ede6dff9ed77aa9c09ecdf6676f2a8206238a3ce78f6079444dcaf7668e479ca10d9c061dd079b958851cc20bfae4bdab68a719ba8e667b546","ssdeep":"","tlshash":"dd511f1ee1415a7d5cb7858a6e8fbd04bc299e88d72e4852b07af80f0524c3f6b673c5","first_seen":"2026-03-15T15:24:57.091442Z","last_seen":"2026-04-14T11:06:51.965806Z","times_seen":10,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/useScrollHideNav-BiyNAyFI.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/useScrollHideNav-BiyNAyFI.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-5ff\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFevoW29naKl1K6YvKRRFDyQytyG1Ye8p8wGldG7hCsCrUEk2JwqW5tn5ipwtV3whGN3NCwPuAB2jBGmf%2FK%2FsLa2KyOPBEZy2OgTCeOxjB5A5nwt6Zo5l1CSGI8oQ2ZKFHpT3bqK\"}]}\r\ncf-ray: 9e27890f6ff91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1535,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1518)","md5":"629e6ddaea1779a8891215f0b67ff76e","sha1":"07d3bca12a2a53ccaa0c78d2b8552b24350f441f","sha256":"d490190071c87bcaa3f51f9e61533e96abad3d0840609ed0d07427d51adc5e9d","sha512":"2d64e8b36dabe883426ae1285a19f0ee14daceb851237ddd7418700e872dd897e18b6ba13a6a10a9b2e1f66965e174c767f13381da5da147ca9dd5304d037f90","ssdeep":"","tlshash":"8131ac90a4d25abcc6ab06c9d33aeffe33777fc2b0589298c41d1c349199992d0645f5","first_seen":"2026-03-13T02:58:07.848864Z","last_seen":"2026-04-14T11:06:51.966911Z","times_seen":11,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsIconGrid-B8-agIMT.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsIconGrid-B8-agIMT.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-88c\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYyi5x%2BvjsVEUcmYdX35gcVnRpZDEUsJxmMlHHCoIROzLgv%2FDpMNx6D1SnsQOkwqAQPDSpgsIUkaBYqklUxVRzk%2F8FcVPXucpslNNl7VKZj1PIor3Swk%2FuDNrtwlz661P6%2F6XZEC\"}]}\r\ncf-ray: 9e278912f8811525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2183)","md5":"752479f83a30e532aa7dceed8bc038a3","sha1":"a81230788570ca055222afd5161c737db1f86ee6","sha256":"f31471686dd9d23c4d60da0dfb9b867693c929cacc4bfc5e8d6639c2197beabd","sha512":"bea9b185ecf636504c43eeb85824fe841f60562435ce7e975752b24f1087136d35838470ed94e61cf4967613dd2f39667c8cb1141db2650a190cecb9696a0ff2","ssdeep":"","tlshash":"b541454ee103eeedbab309e4915da500b8065f5cd72ec8d0f1bc96080760d57f93b299","first_seen":"2026-03-15T15:24:57.094909Z","last_seen":"2026-04-14T11:06:51.928408Z","times_seen":10,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/5432-150-48ce8268-3b19-4da1-b6dc-ceb11454d85c.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/5432-150-48ce8268-3b19-4da1-b6dc-ceb11454d85c.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 44245\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 7f4fb51f9dd144f8d6fc29dfc11cdd1c\r\nx-amz-request-id: 16426f02-7889-4485-94da-2a6b3a2aae71\r\nETag: 623ab8d888f0aeffeddb060f238d340f\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Fri, 18 Apr 2025 09:24:59 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44245,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"623ab8d888f0aeffeddb060f238d340f","sha1":"f3758729dfbcfe7efd88ebf4e1d9a00080acd1e5","sha256":"b14652470f033b16d36b03698ec911a83cb42f97278553f1a8f2b50de1d75092","sha512":"98cdc93fa568146bd6513c553c8b17bb5ba3621285610cc8ef6f4ca3498fe56c9a624027a2b54b1a3b3209de7b824bc68f1a0f4ec5031961dffe95feb4437686","ssdeep":"768:YzM3R0TM8tCpmGGhDBDytCpmGGhDBDytCpmui1U2YpTqYr3U2YpTqYrMU2Yfca7:YzM3R0TM6CwRUCwRUCu1URTqYr3URTqK","tlshash":"9113d0683ec92439c64758b2a7774b5cd233cd3d2a781d36d71ed1c0b8aba1138b6a41","first_seen":"2025-05-21T04:31:42.725402Z","last_seen":"2026-03-30T05:59:29.46501Z","times_seen":44,"resource_available":false,"data":null}},"time_used":2909,"timings":{"blocked":2324,"dns":0,"connect":0,"send":0,"wait":294,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh3hfnb.xmpusy.cn/web_resources/2026/03/26/35/09b0c8e2-7d61-4186-9580-994c177fec72.txt","fqdn":"fh3hfnb.xmpusy.cn","domain":"xmpusy.cn","tld":"cn"},"ip":{"addr":"104.26.15.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh3hfnb.xmpusy.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 06:07:15 GMT","end":"Fri, 01 May 2026 07:07:13 GMT"},"fingerprint":{"sha1":"30:13:F1:6E:E2:11:6E:91:2D:DD:11:45:17:04:43:05:A3:DA:B7:59","sha256":"9B:56:84:33:6B:8E:83:A3:24:A2:E8:31:93:FE:47:D7:8B:0F:B6:48:B0:27:22:7F:52:77:94:82:D8:24:86:B2"}}},"request":{"raw":"GET /web_resources/2026/03/26/35/09b0c8e2-7d61-4186-9580-994c177fec72.txt HTTP/1.1\r\nHost: fh3hfnb.xmpusy.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:41 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Thu, 26 Mar 2026 07:23:34 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\netag: W/\"51e748d5c734d753f0bedc77ef12e799\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 339b50639d9b4146fda74da7c1df3f92.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: SFO53-P9\r\nx-amz-cf-id: 9bycDiyK0_nwP6zj3SqzwniWOeEqBunthO8xn0LFDbT4dQ2qtepudw==\r\naccess-control-allow-origin: *\r\nx-cache-status-b: HIT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI9xBFmxSeqX2%2BPBFB%2FXwQ9Au1qX4bnonRQ%2B7wHcluAdsd9k0XJbPDt1gk2KJ4FtqGOR42Rfd%2FVG6Z5Z36b9bbtjSk78YpTkZOukF1jeOK7h9nrClcMx36oyk1e3JUqRufzi\"}]}\r\ncf-ray: 9e27891cbb01b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":417091,"size_decoded":0,"mime_type":"text/plain","magic":"data","md5":"51e748d5c734d753f0bedc77ef12e799","sha1":"6543c80a53b17d2d49b75a2eb3e8d0373ea529f8","sha256":"f3d0a922a405f6a1c95054df3426ccb0b108cc3464c220b202048a117ce507f8","sha512":"3aebae83f5e0a972d9bdd1dd5bc94275ef8816c3ef1559ea60a153e40439436b5adbb1ef0967971b832c4bc456692cf93afa62381a55c57b4e86baa5055b5140","ssdeep":"12288:R4onfFY0YYo3o71qzfD54FG5UpI9SJsoDlS:R4ofFYj3cqziFGseoDo","tlshash":"239423d1d8c92fff2f5496f1187e662c17d0ec1015a0cddaa3c8e5f2982bb12574b968","first_seen":"2026-03-26T16:30:19.973569Z","last_seen":"2026-03-26T16:30:19.973569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":285,"dns":231,"connect":5,"send":0,"wait":181,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh3hfnb.xmpusy.cn/web_resources/2026/03/26/46/fa51f279-41f2-4812-b08d-653e777452e5.txt","fqdn":"fh3hfnb.xmpusy.cn","domain":"xmpusy.cn","tld":"cn"},"ip":{"addr":"104.26.15.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:41.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh3hfnb.xmpusy.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 06:07:15 GMT","end":"Fri, 01 May 2026 07:07:13 GMT"},"fingerprint":{"sha1":"30:13:F1:6E:E2:11:6E:91:2D:DD:11:45:17:04:43:05:A3:DA:B7:59","sha256":"9B:56:84:33:6B:8E:83:A3:24:A2:E8:31:93:FE:47:D7:8B:0F:B6:48:B0:27:22:7F:52:77:94:82:D8:24:86:B2"}}},"request":{"raw":"GET /web_resources/2026/03/26/46/fa51f279-41f2-4812-b08d-653e777452e5.txt HTTP/1.1\r\nHost: fh3hfnb.xmpusy.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:41 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Thu, 26 Mar 2026 11:42:01 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\netag: W/\"3867e25c0474c2d3ffb8ecd5cad74e44\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 594aaf7fc75f90b0c38ad7166cc419ea.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: SFO53-P9\r\nx-amz-cf-id: LAxBpznmgQJ4xLSKqN1tv_wOPOPtnvAJLOAdEKzVGH2kNdlfMs17TQ==\r\naccess-control-allow-origin: *\r\nx-cache-status-b: HIT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l68QObADlVPLNynFrnH5OAEI7Z9PwX%2BmTtaVdolew3x2iLH7Z1p8dMtQ5bSZeAQ2n9E%2BpqeqAZ9g94ci32UkfodCJNfAw0AG3s2OYeGsN8JRjfLVIyGtWearYWlr2sS6AK04\"}]}\r\ncf-ray: 9e27891caabeb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":400907,"size_decoded":0,"mime_type":"text/plain","magic":"data","md5":"3867e25c0474c2d3ffb8ecd5cad74e44","sha1":"501029b1bc55abe12f18fc052c7e900328433a6d","sha256":"5962c3bc35ce72583f2c6c2426378550adc510198d499d6956660232f8d094fa","sha512":"64f55ebc60e09135d2cf85b88c85633688a9a362213b598ad479706d24167f4ddec93ee7a8a728e19c3f1da0e69803bb0eb0df5f173cfc5cdd6d5bfcd278cd84","ssdeep":"12288:3iGOAhRafk4q94CFfnNowOzOcsTOv53BB:VJRaM4q94G2wOClqdBB","tlshash":"8084236020984fdfcf1459653ebbfe1d2df40de598a9985a80e225df01eaee15c37b02","first_seen":"2026-03-26T16:30:19.975399Z","last_seen":"2026-03-26T16:30:19.975399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":95,"dns":54,"connect":4,"send":0,"wait":180,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/tag-CQx7xICw.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/tag-CQx7xICw.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-64f\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsxhzP%2Fh9t1th%2FIACP%2B3ESybKfbC5zs%2F7KUaPNUo6SC3xoVFmILtL6gf%2F5TIux4EjACDRQpdAiLGgiGkLpNOvMcKsasG6Cor9m0vOM%2FQ8b5mj6LzZuajhOFmtlTanUFvdCJcYgd9\"}]}\r\ncf-ray: 9e27890e0f961525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1615,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1614)","md5":"c136b87fe29abb46d9a7a5f9a0b2ab56","sha1":"b1902eb4ab0b396248e30a14554b7c16d791494b","sha256":"1d3a655bb9b102bce0450a26ad9aab2c8c86d47a79d08dceec1c552ae54d4aff","sha512":"37b4801f489fe6a969c30738b0c37c53c02c9484d112d3eaafbdf59102d336330922b90d53830666fedeae537565a5c2d84c138ed0c927449116beb8c6864e35","ssdeep":"","tlshash":"bc316619f06075bd126b4d6eb0ac7ca5e74ccbd8d7575de2f8de013502f20668b36505","first_seen":"2026-03-15T15:24:57.106408Z","last_seen":"2026-04-14T11:06:51.980642Z","times_seen":10,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/arrow-left-CILfl94b.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/arrow-left-CILfl94b.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFSq%2Fl8QSxtDYVc0Hf1K5ejAxgaCvCpcPqJ2Zh0tSIExPlBDBB9JCqTVphrM8ekpNjWNugxas5zLbt%2Fizr8lhSzQOIaweFxieoTLlNlEK6DYVtzoADANDT6pjRyJ47VgzbwHuWSD\"}]}\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\netag: W/\"69b3e324-152\"\r\ncf-ray: 9e27890f7ffc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"78a2c2b826f8264363f0bc15f2b1442b","sha1":"181708467e4b3662cb8d5583fdc1917ab149c3df","sha256":"56a17e57a0eaa202756c28e92daa06dc7b91c253c87e0254fe3b0d998308074d","sha512":"79478ca5f053af11779530ccbee50369c8e28cc0c71dbf0e4973742ce1e7426929892e65c4537adb9ccf8461e209e2c4fa3a1ff49861fcb6a4ef14d42da71596","ssdeep":"","tlshash":"34e0266f298012b3027184781b0fe5ca564815fc836fb650b40243698a300bf46dde90","first_seen":"2026-03-15T15:24:57.109514Z","last_seen":"2026-04-14T11:06:51.93462Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/69_icon_3721_150-3e839d0a-eb8d-477d-92f4-c17d8fa4a0e7.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/69_icon_3721_150-3e839d0a-eb8d-477d-92f4-c17d8fa4a0e7.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 155168\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: b12c0a87f0ddd56f7e65af7568dda270\r\nx-amz-request-id: 1342ec79-09a6-4780-ab95-03225d2a662b\r\nETag: 882bea9409e44424f5557771e92f3436\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 24 Feb 2026 07:26:57 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155168,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"882bea9409e44424f5557771e92f3436","sha1":"95226be586f421f8a92c8b7c5730d302501eb8d9","sha256":"d8d961e5916fa3dccf82f730b9f5560c0a658bb9aa7718ec7899fc858fe88871","sha512":"234e20c9b3ee46f20e4fe34b9989103ba2dadd0dada98d4151aadab620802bb9ce58272cfcae604baa8d56475a32168df7443daeba759241a35cf1182e20f0b3","ssdeep":"3072:HTbbC42Dwn+3mt6hvZsXwttDHi4da0ybqI0kkGh9gFM:HTbOlE+22ZkQDHiMQDcGh9g+","tlshash":"54e301afdb299609dd4ff0b0d89c8bea90e9d598424af8c38c555acf1d620fdc7458b0","first_seen":"2026-03-13T02:58:07.87108Z","last_seen":"2026-05-29T09:37:04.350236Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2954,"timings":{"blocked":755,"dns":0,"connect":241,"send":0,"wait":243,"receive":1195,"ssl":518},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh3hfnb.xmpusy.cn/web_resources/2026/03/26/42/2d0d67e3-3fd4-49af-ab9e-f5d8250603fb.txt","fqdn":"fh3hfnb.xmpusy.cn","domain":"xmpusy.cn","tld":"cn"},"ip":{"addr":"104.26.15.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:41.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh3hfnb.xmpusy.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 06:07:15 GMT","end":"Fri, 01 May 2026 07:07:13 GMT"},"fingerprint":{"sha1":"30:13:F1:6E:E2:11:6E:91:2D:DD:11:45:17:04:43:05:A3:DA:B7:59","sha256":"9B:56:84:33:6B:8E:83:A3:24:A2:E8:31:93:FE:47:D7:8B:0F:B6:48:B0:27:22:7F:52:77:94:82:D8:24:86:B2"}}},"request":{"raw":"GET /web_resources/2026/03/26/42/2d0d67e3-3fd4-49af-ab9e-f5d8250603fb.txt HTTP/1.1\r\nHost: fh3hfnb.xmpusy.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:41 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Thu, 26 Mar 2026 11:42:04 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\netag: W/\"7db00587ff9bf86c4cfd82c2ebaf3f02\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 33f79df4121ee0706df1acf90de7d018.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: SFO53-P9\r\nx-amz-cf-id: qpbfzgFC4twzCJ9VGrPSQqYIXz-8WcBZakB0IRxqeYsgRfE6PJ3zGw==\r\naccess-control-allow-origin: *\r\nx-cache-status-b: HIT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIAQ085DN1HmRVStrotNKqChdQbeHd7R8FEHIO%2BoZwGroQ6HFYy%2BxXaj8G0h%2BtPDqrHK1xT98J4d2ShtEu0nddAH3Ke%2FMneApX8BzAHEESaGhgb3OlLQzJYvo64NpagfElhy\"}]}\r\ncf-ray: 9e27891caad4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":446895,"size_decoded":0,"mime_type":"text/plain","magic":"data","md5":"7db00587ff9bf86c4cfd82c2ebaf3f02","sha1":"2dff0fa80910d995df05ca7fa743ece2b3ca97ea","sha256":"c4328e6295b6e257e067f442eb38d4fcb21bde41c45cccce0d590402e0b1ca02","sha512":"f89fb8cb25bf14e72b96ebfc9becfbd22ed3ccbd0bb2a9f74a8b42e0e8226d9de9836161090b4115a5a23ff212f579559d4037cdec7f24779c14d61a500f043f","ssdeep":"12288:w7L4GF4GbnSWSH3DLC+6VowH+g3xKw/VtAp:wnfaGzSxH3D2ZowHEGVtc","tlshash":"249423f0db217e3e4e948fe5b4852b576c50ce03a0cd61748a9664eb417dfc8ad2d8b0","first_seen":"2026-03-26T16:30:19.978495Z","last_seen":"2026-03-26T16:30:19.978495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":114,"dns":70,"connect":5,"send":0,"wait":195,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/react-vendor-CjZsb-BP.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/react-vendor-CjZsb-BP.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-30b6\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cvIakQJuO0Unj6%2FzGnpOvkZKXchluZiKYDZ7I%2FvB%2FHX%2Fx5VxPKDoPQk3LfAd14OwFv7q05vxBgov5rgDpPDeSMlMLebtDjvYKXZSTIw3uQTi6E3icUdWvR4OtqLKNM5pTrc9MOM\"}]}\r\ncf-ray: 9e27890b8b845689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7625)","md5":"4c3daff76e9c753583ae817e4a6c2d1a","sha1":"d4293d97ea6d30a042961280c95b763295a4bcc6","sha256":"d0b831bf4a7e9540ae7a47afc72fee9baabeccb6c1e2e988e460a913c9f82bc8","sha512":"2fbb8aa4b61033eda7291455cb24fa08f1a279c9e71b94bff55124c68b8f644aef0ebe26ee7f07f930c6dbe144da1e9962d063af2b364cc07a53a7af002c3241","ssdeep":"192:5NdELVzXSN6lfHt9lhYsiA3Oermf5Gavw0lAfknmV+cHjmT:5N+RikN9/JUGavlAfkmct","tlshash":"cd42a3cc7599b0500aa3b970507f911bf37d38b6289cc1b4a2a6c4f8bab455dc137f6a","first_seen":"2025-09-10T13:21:03.844292Z","last_seen":"2026-05-18T08:35:19.483554Z","times_seen":148,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hljbrsn1gj.qiaozhixuexiao.com/sdk/web/countly.min.js","fqdn":"hljbrsn1gj.qiaozhixuexiao.com","domain":"qiaozhixuexiao.com","tld":"com"},"ip":{"addr":"3.167.2.20","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.udfyy.cn","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"02:39:B1:87:A1:EF:1C:E4:D4:0B:87:F9:D8:B5:46:AC:BF:F7:C6:6C","sha256":"42:B1:24:E8:18:51:85:A6:0B:02:C3:DA:DF:9F:36:D2:AA:A9:BA:C5:1A:79:2F:CA:3F:C0:6E:62:CC:6F:A1:B7"}}},"request":{"raw":"GET /sdk/web/countly.min.js HTTP/1.1\r\nHost: hljbrsn1gj.qiaozhixuexiao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: nginx\r\ndate: Tue, 17 Jun 2025 04:01:27 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 17 Apr 2025 13:34:53 GMT\r\netag: W/\"19405-19643f5a048\"\r\nx-frame-options: deny, SAMEORIGIN\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c66a2f390287242c7df16dd5190aa68e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 8rc61HftLJ4AGzfwQZZLo2Hp01pvQmKGzxAOi06XjGYU0Xy8rZTvug==\r\nage: 24409693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103429,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (970)","md5":"fc51efe98279017b8d31200017b7a3f5","sha1":"e83b1330c27cbf76bd14e5423f9dd0e72f9488fa","sha256":"84c14e4c510df2a1f810114a2af84253de52b61a7101cfd6c35373321a31ecc5","sha512":"6fdd13428a2c7b9fa71179d490823eb208a8821e4846bd4e72aea8e4fef6315c6d597dfd23e933812507c4ad6e5c119ebe75c4e3f72b50c52b933b7c82582485","ssdeep":"1536:Kys2S5e6+q5W/iwYjsx4MVvyQeHEG6sWMaM9JiqjmMwmiGd7tQ8inmjTTqp/Z7aT:cmq5WmuUiMkmi8RLinmnTUZ7aauVmo","tlshash":"d0a309ee65893be8ad776274337e8200b378d3f61a1d6452390985683db4cc6427bf1b","first_seen":"2025-03-02T04:39:59.296996Z","last_seen":"2026-05-15T20:33:51.031237Z","times_seen":132,"resource_available":true,"data":null}},"time_used":4229,"timings":{"blocked":2109,"dns":1850,"connect":1,"send":0,"wait":4,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/react-vendor-CjZsb-BP.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/react-vendor-CjZsb-BP.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-30b6\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlWlCe97QEBZ5Nf8QTXo8Sc4Mk%2Fr2OGmzWtBjFF6TGysawnxdbw0P0W5rxur8UBJfLmhX%2FNoHUGcKqMWFS1D6eBzWaZWaBNbbQF7rBtp%2FzFvwadI3bCDC7cxAJYPajzFhJHxnyRE\"}]}\r\ncf-ray: 9e27890d0f771525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12470,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7625)","md5":"4c3daff76e9c753583ae817e4a6c2d1a","sha1":"d4293d97ea6d30a042961280c95b763295a4bcc6","sha256":"d0b831bf4a7e9540ae7a47afc72fee9baabeccb6c1e2e988e460a913c9f82bc8","sha512":"2fbb8aa4b61033eda7291455cb24fa08f1a279c9e71b94bff55124c68b8f644aef0ebe26ee7f07f930c6dbe144da1e9962d063af2b364cc07a53a7af002c3241","ssdeep":"192:5NdELVzXSN6lfHt9lhYsiA3Oermf5Gavw0lAfknmV+cHjmT:5N+RikN9/JUGavlAfkmct","tlshash":"cd42a3cc7599b0500aa3b970507f911bf37d38b6289cc1b4a2a6c4f8bab455dc137f6a","first_seen":"2025-09-10T13:21:03.844292Z","last_seen":"2026-05-18T08:35:19.483554Z","times_seen":148,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ui-vendor-DHDowlb1.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/ui-vendor-DHDowlb1.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1bf9f\"\r\nexpires: Sat, 25 Apr 2026 13:28:52 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 10846\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ncd2o3zyJLgJqUvm8vZ5lFMF3NoIIx2VwyA7BxXWmpi0AH%2BIvs5ZqD0RxinA2ubEPUHgdpNwmF51XwjNCx%2FZy5lu5%2B1Fr6TP9iR914QtmWfsveUfDnrqbTLRnxTL02d2r9ibZDg0\"}]}\r\ncf-ray: 9e27890d0f7a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5201dbf7ef60ac7bab3e780fd7278c8c","sha1":"cf3b2d845c9d1b3e6d5b1ab316af104121cc8885","sha256":"67bb811b766d4c8b29cace6207e00988ef811c6a7c8cfc6eb4a49844e70e83d5","sha512":"ff3be56fdd5e0c291579fbeb3991c897e9506bc17a304f660c8de73b8e9d79aaa6bcf8a6bf90db7454d9faced05e575adfa06e29fe62b2731778b0b3f4a18813","ssdeep":"3072:7dHTzTletONA7odgnVxPkN9gkDlxw4mV2Q:hHvhetONA7odgnVxPQykDlxwnV2Q","tlshash":"9cb338c97161b57683eb4aca92ba811173760950744ec4a0b1bc8c6f287a94853ffffd","first_seen":"2026-03-13T02:58:07.82805Z","last_seen":"2026-04-14T11:06:51.95427Z","times_seen":11,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomePage-lUoZUyJm.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomePage-lUoZUyJm.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-3bee\"\r\nexpires: Sat, 25 Apr 2026 13:28:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrLoXJXhoronaQSdLinDoyY2LjIHGQc8JK16KdzUdOYhB%2FcTsm68nfTzbAm%2BmAgqUQvd75KLsqR5j03tmOwxAVlVm5o2R4niEQ5%2FxgFFquM8sLlDB8%2F4EdK2uLSpGYzWFfZ%2BNKgn\"}]}\r\ncf-ray: 9e27890def8d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8938)","md5":"89af59a7f710b5b6060db2dc60faaaf5","sha1":"394387c5f532e8e47862cb6046837d5b5bb1d693","sha256":"bddf7bbb10ccd6a4c65833586acd209cfcccd56ccc143949028db6f54b02ea57","sha512":"db59a040286481a54468c0ca49c8c491bc8fa3af6313b3142ab409e9399bbddf1a4fe141f152d0c8b7ae8006a1faaf21c4b7083d1ff5e33266a804e2a8ad4c86","ssdeep":"192:r7pYEsOY8PWuw9J3bKZJGUpwQD/wPRORpWM1fM/9ptvhORTp0ksf2YjJi16+Ct2q:r7pYEsONu9JgpwQbWJSEdJn+Ct2mVDd","tlshash":"4262541ef013dabed9f608955d6fb8483c065f44ca2e8491f07eaa1c0620c6f765a7dd","first_seen":"2026-03-15T15:24:57.107443Z","last_seen":"2026-04-14T11:06:51.993011Z","times_seen":10,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsSafetyTicker-Ysncr8u9.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsSafetyTicker-Ysncr8u9.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-4f4\"\r\nexpires: Sat, 25 Apr 2026 13:28:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMGpC3noom9hlYDFi6sQe8lvE3b0QTBjfeNNlayEYYcSyISr4%2Br4BfUAOPAmNECagF8UfTiIr%2FMaJ36FQoH%2BzGidKWD0CHI9rGIL4LzroKv7QGDDZeoWwzuywkh%2F1DN%2Fg38GvxyD\"}]}\r\ncf-ray: 9e27890e0f971525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1191)","md5":"41db6b618277f5e7b6a91533e3fb7f9a","sha1":"f23771a117e78de826d91b6194b3b0b281e8e705","sha256":"533d35783c93a9fb411e9c237a7db76de87579e41ec0e32d31d3e8c9df643b79","sha512":"9c06db16c8ca2f5e08440d3ee7c3c106ebb7da209dbe0de9534435f4830091164fb137f3233fcbed4bcde8af064f49e9edde7c206673ad82984ddee56f77cce5","ssdeep":"","tlshash":"d421451e51114fac6df705a65d3fd809700eaf44cb5b8966b03dee003f64c6d3706685","first_seen":"2026-03-15T15:24:57.093096Z","last_seen":"2026-04-14T11:06:52.027235Z","times_seen":10,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/utils-vendor-UUdv1Xw0.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/utils-vendor-UUdv1Xw0.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-2053d\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwqFjfLDB%2BPW8Jv901NSg3eOpktDRGabACZzwl1gwvyaQIcGM7CaInvIQsVoY35mgYSJB2VNn%2FYOLuryBDHb%2BYAHWOwb6sj7S9X43UJy0twVjRbSxB0Z8tbcIsZ%2FLUZSTZD%2BH6i7\"}]}\r\ncf-ray: 9e27890b8b855689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14724)","md5":"01d9430173b04fffb1357e26ce126349","sha1":"c33b0e7215b525704cc171e55bda092626e53eb4","sha256":"630c039a5231957c4875ad51958c0a91971c2c8ee28a7dbc101aed56f9b8aad5","sha512":"63eb383df3906b5a18fcabb5be8f7b71a3004d6f67ac62da2758abbe6febe85efca6ac5bb3c3909fd331a51e786c93ce81cd5cbe53cb44abb965d3d4909ed246","ssdeep":"3072:9+EUIJvzVudqU9xN16ZhmTSc2XZKDRVm9WZHpiZEXUVvtrOr7QXL7Y/TJ3Bj2fIa:QMJvEqU9xN1TTSc2pKDR/W8Alo/T1e1","tlshash":"b3d33bc57295b0a243e760e4043f140bf2ba6d25294d8598f658e8df7cbc98a817bf3d","first_seen":"2026-03-13T02:58:07.83102Z","last_seen":"2026-04-14T11:06:51.932964Z","times_seen":11,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/layoutStability-Dq7IThs2.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/layoutStability-Dq7IThs2.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-a4a\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXBtIoe4IOcFjidxIoOWebHnF3TnnZ6px10BFn0K5IliR%2Bkh2eHNuVh8N7%2BdUrCY5%2BTtvucemUSGbrRKWsBBvjWrVTXzU9jd5MMvdnQYhAT3Yr7cwfmU1s%2FB%2F507JJFGtj0QNCis\"}]}\r\ncf-ray: 9e27890f6ffa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2531)","md5":"5353d3e35cf4294f300cd4cfa90591e3","sha1":"ff6b45bb3a5c17714f70f8b1ab113e3b08873f5d","sha256":"bbcb3be5565ef159940a3f953c26550a3fe79e808b5047fddc766731f19953ff","sha512":"494be1d41f1b7a1c3f12758f862078d9490966348608dc8e109d209a0295b9cd7aa764f271397f56b99f9c2c0e123dfca5d8fb70fec5a21d1f04914ce39e426a","ssdeep":"","tlshash":"eb5185817aa5a432866a605689511a0273240f649f15c4e8f67d2e6f003bd8337fb27d","first_seen":"2025-09-11T13:20:21.059115Z","last_seen":"2026-04-14T11:06:51.959728Z","times_seen":76,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/api/topic/list?page=1\u0026limit=20\u0026sortBy=topicSort\u0026sortOrder=ASC\u0026vodLimit=10","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /api/topic/list?page=1\u0026limit=20\u0026sortBy=topicSort\u0026sortOrder=ASC\u0026vodLimit=10 HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 893\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 26 Mar 2026 16:14:38 GMT\r\netag: W/\"14801-btzZywvBsKJVXvWq413AOsmKmgM\"\r\nlast-modified: Thu, 26 Mar 2026 16:14:46 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nx-encrypted: AES-128-CBC:hex\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83969,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"98fbfce4dbc63066d46de5e8ec7082ea","sha1":"6edcd9cb0bc1b0a2555ef5aae35dc03ac98a9a03","sha256":"086d94bbc12847878830a16dc6a230547d531d9b81f8c341c197b3c83f126546","sha512":"2727718d2395d3e618b75bfb1f7131804ea160137c2c4bc3bb92ce04bc0dc2eb1277f4c4d7eeac54a71c30b56958c56ffde6e7b43a34c6bc6bea170fe888c5e4","ssdeep":"1536:vs8degZ9mPsrPI7KOgkglQ8QCIg5pt/DMnFrgiXpdXCfVPUJ83rIquZ:vsKeG4PaPI7peQ8QspQEiXLXCfVH5uZ","tlshash":"5783aeb87514add269ae1767ceeaacdd03b62723dacb64cd80a477c30463365fe02c05","first_seen":"2026-03-26T16:30:19.983594Z","last_seen":"2026-03-26T16:30:19.983594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/150x150-689-068e1267-72e3-4f67-82f8-190988803912.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/150x150-689-068e1267-72e3-4f67-82f8-190988803912.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 159718\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: a562173d7b9a3f6dce37ebf5d5b7b1c9\r\nx-amz-request-id: 622ef775-f7c0-4235-a271-bd8350654717\r\nETag: f08e3e0b5735f72394fa5f213c9aab48\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 10 Feb 2026 08:16:00 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":159718,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"f08e3e0b5735f72394fa5f213c9aab48","sha1":"1fa20ad46adb98d357bbdc6dc3b538a7d2a3f553","sha256":"7030da064a5d0d5bf92d9de45bb1f09190652d77922be06a069ee659672ba3de","sha512":"59bb41513bebb135ca58e6773e41d9a31f1c6ced8c8351ff3f081be018f9e5781de85215d3c577eb48679f56320a7d957f17e200eb0a2685abe7f3f5c023d2dc","ssdeep":"3072:cgpTBH0zuDDIXEL/oiSELmPHvSyAmLeQD6iAsn6dZRu41IyoN:zpTBH0zwUXEkPE6vvSyAmLeQD6PscZRw","tlshash":"72f3123d9d8e24123d0204d2edad4d8f93d909feb9adea010bf5a94952078f858ff176","first_seen":"2026-03-13T02:58:07.839116Z","last_seen":"2026-05-29T09:37:04.348843Z","times_seen":20,"resource_available":false,"data":null}},"time_used":4537,"timings":{"blocked":1463,"dns":0,"connect":0,"send":0,"wait":295,"receive":1453,"ssl":1326},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/5432-150x150-129a06f7-afd9-40e7-a1b5-5a693c1f6909.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/5432-150x150-129a06f7-afd9-40e7-a1b5-5a693c1f6909.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:42 GMT\r\nContent-Type: image/gif\r\nContent-Length: 259530\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: b12c0a87f0ddd56f7e65af7568dda270\r\nx-amz-request-id: 07fe05b4-cf80-483c-9f5c-7853d4949d97\r\nETag: 3cd5d1cc38d502e711c5a275738b0dce\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Wed, 18 Jun 2025 03:53:40 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":259530,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"3cd5d1cc38d502e711c5a275738b0dce","sha1":"a12512fc6956ed4c9003c3a26bd55a655912a2a7","sha256":"e37aeda195a8d55b4a51e7dddab1c3109df654fb9d202df2c6276a91a3509d61","sha512":"28177626f720367a75c9684bf1adbb9bd17d3becdd16d5e1a1b220b67b1ffea6673aa7c52e1a745bfc4c3440c6d744d24f48b75a625e5c23a52882f02c688b0f","ssdeep":"6144:APqqRp2UlaK16IdRwKT9Oi3PX41z8ZaLvx+TOEmlTYAynPK65J/ZGVh:APqqRcUPcIjwKsC2z17+OEmUPKAih","tlshash":"d3442306cb92cc83d53e71f5d5eba5c26803dfc80646a384b985a95f72fe5cee035524","first_seen":"2026-03-13T02:58:07.878157Z","last_seen":"2026-03-30T05:59:29.486758Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3857,"timings":{"blocked":2184,"dns":0,"connect":0,"send":0,"wait":243,"receive":1430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/icon_150_02-2d335c95-6d93-4c5f-b1cc-e8d689c61851.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/icon_150_02-2d335c95-6d93-4c5f-b1cc-e8d689c61851.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:43 GMT\r\nContent-Type: image/gif\r\nContent-Length: 123334\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 88440e8e36363291ee068addf7075a45\r\nx-amz-request-id: fb3ef0f8-a62e-4b7b-9688-3be59fb06131\r\nETag: bffb1face255f7684903148265c82915\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Thu, 15 Jan 2026 10:32:50 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123334,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"bffb1face255f7684903148265c82915","sha1":"b83b1037b0bafa1dda0c66bb7e7cd4495a0488f8","sha256":"421394893067c95054cdb86ce01c3d9b51eff47f8022d0f19b70531740bd5735","sha512":"19623c0bc694823204c5afefc3ea715602b7cc015b4ed31613d116bca07d480e82246c94c477908d5ffd9b522409870748d1995aecdd6c9a8e713174fe953661","ssdeep":"3072:2Cu1GntxH5W6NsJLyNZaCZQ5e1UEZcW6cN7EI0iUWze+Jkmr:tu1GtxH5W6NsIJZQg5dZ50iUKek","tlshash":"33c3120dec3d8616f05d1e7deb08ba2dea08ad85535d56739b0ef2c10189d9f58a90cf","first_seen":"2026-01-19T14:51:24.473899Z","last_seen":"2026-05-22T18:31:19.061129Z","times_seen":25,"resource_available":false,"data":null}},"time_used":3811,"timings":{"blocked":2633,"dns":0,"connect":0,"send":0,"wait":297,"receive":881,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tmzyz.com/vod/bf9fc68c-60a3-49a8-9fbe-1e384b9b5347.gif","fqdn":"img.tmzyz.com","domain":"tmzyz.com","tld":"com"},"ip":{"addr":"104.21.56.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:51.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmzyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 11:34:38 GMT","end":"Wed, 17 Jun 2026 12:33:08 GMT"},"fingerprint":{"sha1":"E4:72:88:DC:EF:78:F5:1C:54:DB:3C:2B:90:8A:A9:F5:BB:81:D6:62","sha256":"80:8E:7B:41:8C:ED:57:84:6F:A8:06:15:AC:C6:9C:D6:51:30:8D:D2:05:40:43:47:71:8D:7E:26:B2:51:EB:C4"}}},"request":{"raw":"GET /vod/bf9fc68c-60a3-49a8-9fbe-1e384b9b5347.gif HTTP/1.1\r\nHost: img.tmzyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 17 Feb 2026 13:45:29 GMT\r\netag: \"5f362-64b0548d9ae4e\"\r\naccept-ranges: bytes\r\ncontent-length: 389986\r\ncontent-type: image/gif\r\ndate: Thu, 26 Mar 2026 16:29:51 GMT\r\nserver: cloudflare\r\ncache-control: max-age=604800\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmp3eTLhGH3ajJ3CmtxLfXFSL%2Bl0iyd4kAEdkfY2ERAmArE1Twvtu9YzUEdvPAF0%2BAfiPss1vTUsgRCcln%2B4A6%2FxNbLXKUyXHMiQKJSJV16k%2BdDNYi%2BnJlgyZUCLdrXk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e27895bb8eac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389986,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 180","md5":"38a62c96f39bbf79703c72b6c2a2f51e","sha1":"58bfca509c2c940e3f23a5f650de6d558dc4d73d","sha256":"8ebc73ad3c24cf69b8ecb7c86b6ec78f2d870d4673a88c28433dc86b2e8808c8","sha512":"c862c3947ac0803794476bb44ecdf3e102ef50b0b0233a1cac46e1dcb80594987f6eddd811ae408878f6f47dd141c8655de93ecb57b6b2039910970248a05d72","ssdeep":"6144:PxGsnbrylNL/03IM/UFsub1r+yMOQ5X7xAzdCdBV3VxTJKi9YFVKbrm6PVZZKddH:PY6YL/rjJB9M1dxAh6FxTQaYXKbbAdFH","tlshash":"82842305c3b7c58998b6bc74ca704be057ac20b43a9db3c58ccd67ed73226f5a86216d","first_seen":"2026-03-26T16:30:19.987205Z","last_seen":"2026-03-26T16:30:19.987205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/20260313101247/index-FKH0_8Ya.css","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/20260313101247/index-FKH0_8Ya.css HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-17ae6\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOLhitQA0fzgpFUgTHtTVJVigQ%2FeApnVrdNWCZC188VQUO8oSfvLmMf9LEHv8c6O9g1NF%2BrUb%2FeX4T7b%2Bf96rhcaM2QsTAmB4SlSJUEmpcAv9t6GgXwzEQ7ERnITYYAZB4I%2F0U9K\"}]}\r\ncf-ray: 9e27890989c95689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96998,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bd31585dce82772390b211d05a0b7ed7","sha1":"32c4367c1bb1c65a72afc06eaa9e8872c93fea34","sha256":"5b6e3493ba21bd15ed718e8b35df083b5c456efacdfae2e7de2d987c4e99fb4e","sha512":"7030d9aeac2bca8ffd88d55b948ddf9dca1b7e8ba9ddc2ac40300a6a86cf5aba1ebe5e7ee07a001276b212f698215c6f071192ca23316ebd7b1eded1eb552435","ssdeep":"1536:ovO2UPx2Eue5KPuvbzT+GM98uqFn1h27JZwHzY/gf2kD:2O2UPee5KPuD9M95qV1Q7JZ+","tlshash":"6593f6a4e260e43fbd1379fd639cf41ca51da0c2de634becba52610193d36f61a6b604","first_seen":"2026-03-13T02:58:07.874058Z","last_seen":"2026-04-14T11:06:52.038911Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1439,"timings":{"blocked":622,"dns":605,"connect":3,"send":0,"wait":185,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/20260313101247/icon-CVKa8XY1.webp","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/20260313101247/icon-CVKa8XY1.webp HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7616\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\netag: \"69b3e324-1dc0\"\r\nexpires: Sat, 25 Apr 2026 10:15:07 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 22471\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMFrbS6R3xEFemwR0BMUHJbH41e4REgxxTqJ7EGOS7ykT9ZTtRyKUnDkn%2Fr10w6IXlLozCX7JfEgw1TwnKlINEGezknoTERaTfFEobnC5yRO8UxpF8GqKN7xhk77rUIgdcxiI58q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e27890d9fd956c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7616,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1eba1f926dd6a214ae9b13948e488ef","sha1":"920fcf307ee1248d15f035cb9d926eab7c92fd69","sha256":"c3b6ae245206b9e7fe65afc1e09d830f25226faa33cc48adfbb8f1589ba20331","sha512":"2e8e4915c520148d6f61b722345d3d5c9968f4038d1ed8874b7922900c395adb9305a8d2e589563e695c8615659627ceddd25f5621098f413bb4dc7ab1a0239b","ssdeep":"192:lYLS3DvQGXWRnIiMmQ+b2hTEVO2myEvEvPrkZrNP33yAiL:KLSErIiMLfhaHmJ4PrcP3yAiL","tlshash":"4ff1ae9359bfbe2e616c992c48d659325aafc61131080797a467e34204feac20fe4b78","first_seen":"2025-10-07T19:38:11.748213Z","last_seen":"2026-04-14T11:06:52.028207Z","times_seen":32,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsBanner-BeuKxqmv.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsBanner-BeuKxqmv.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-e64\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JI9BOVbXgvdNOd3v0SWFm%2FHj2mY%2FLzO0VUNJGDMZnd%2BqnUbjVqXA4k3kDjgFIviSzmTY47GPB1QSc0YSYmTmPEPce5rEYub1mrIAqsD1CvCpTgAkU1rj46I76hoKDgve5XewJXl0\"}]}\r\ncf-ray: 9e27891308841525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3677)","md5":"629de7f9adfe69f7782909db72c011d0","sha1":"a5dedbdb3638fcac49b9f1e3aeade14621426cd3","sha256":"1900ff0169753d9e2c46e95841bae89a089aaf7aceea727a89d798c9342f4e53","sha512":"2e6d0d62e1125fffb3e33331f596d8087993b2c5a5f0cc8637c1de01e9dc5b11b45c072d305d511610ae3784a1781a0f29ecb44d631d32e2822a02e51e9be442","ssdeep":"","tlshash":"0a71850de107cafdd8f318d06e9fa88478155f14ee2fc946e1aea50e1750c36d92a39e","first_seen":"2026-03-15T15:24:57.083778Z","last_seen":"2026-04-14T11:06:51.925682Z","times_seen":10,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fh3hfnb.xmpusy.cn/resources/48/488c36896554c0bb49119782fdcaf493.txt","fqdn":"fh3hfnb.xmpusy.cn","domain":"xmpusy.cn","tld":"cn"},"ip":{"addr":"104.26.15.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fh3hfnb.xmpusy.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 06:07:15 GMT","end":"Fri, 01 May 2026 07:07:13 GMT"},"fingerprint":{"sha1":"30:13:F1:6E:E2:11:6E:91:2D:DD:11:45:17:04:43:05:A3:DA:B7:59","sha256":"9B:56:84:33:6B:8E:83:A3:24:A2:E8:31:93:FE:47:D7:8B:0F:B6:48:B0:27:22:7F:52:77:94:82:D8:24:86:B2"}}},"request":{"raw":"GET /resources/48/488c36896554c0bb49119782fdcaf493.txt HTTP/1.1\r\nHost: fh3hfnb.xmpusy.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:41 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Tue, 24 Mar 2026 09:25:01 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\netag: W/\"f8445f640553bc7131cf48d0cdd3953e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1eddbb58412e7e0b212d76c626734826.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: SFO53-P9\r\nx-amz-cf-id: oSFb6vEk7S8DSPG1S2CFOukteZg2FevOS7qAkYhDL_z-9K6lU4vd_Q==\r\nx-cache-status-b: HIT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cb%2Fu2qFFk2RdmWelluMMmXgE4cC%2BK0KxiFaWb98WS8bldH6VBHYVb3cjfN7qu19qMomzpKYHYyR%2Bmc1aImNuVVi4Oisc9FrivEY9ZZ1uEg8iKjwACs5vQkBsrYTP2GABmTRw\"}]}\r\ncf-ray: 9e27891cbaf7b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":62763,"size_decoded":0,"mime_type":"text/plain","magic":"data","md5":"f8445f640553bc7131cf48d0cdd3953e","sha1":"7d7b692b3723f32fd7c8485e3636b573cf119132","sha256":"fd1ac1f51047ddf3e7c61a068c947852b809244f00849bb494e210b6c6994d23","sha512":"12664ae61f353f0adfcf3e067de3a4ae9e3e40963611df25173a99264a58a7ac66f0474d562782e0b8ab60d06d03ebc2d240ddd7e190452f05284364a309fa9f","ssdeep":"1536:vZ2GvfiTSL+0Tezjo5C+hRjYXyl/V78XCDhyW3/M6dW8:vZrfN+kWo93Y418XEYo0o","tlshash":"e75301b8ede56c305248d503106e36862183dff63fc35e9b09987cea2dab7256519ca2","first_seen":"2026-03-26T16:30:19.990164Z","last_seen":"2026-03-26T16:30:19.990164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":293,"dns":241,"connect":4,"send":0,"wait":176,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ingest.twlrih.cn/sdk.min.js?v=454234","fqdn":"ingest.twlrih.cn","domain":"twlrih.cn","tld":"cn"},"ip":{"addr":"172.96.160.225","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.twlrih.cn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 11:03:39 GMT","end":"Fri, 29 May 2026 11:03:38 GMT"},"fingerprint":{"sha1":"95:97:F1:35:17:DC:65:52:43:F3:68:81:49:CD:EE:36:FA:1D:CA:E0","sha256":"22:3C:2C:12:AB:58:FB:76:97:5D:92:9E:CE:3E:24:2F:4E:70:25:75:B4:64:00:E4:A7:46:11:57:41:70:25:9F"}}},"request":{"raw":"GET /sdk.min.js?v=454234 HTTP/1.1\r\nHost: ingest.twlrih.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 16:29:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Mar 2026 04:36:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69c4b7ea-f6a9\"\r\nexpires: Sat, 25 Apr 2026 16:29:37 GMT\r\ncache-control: max-age=2592000, public, max-age=2592000, immutable\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40011)","md5":"588cfbeb18b4b813c8065b0bcde5662c","sha1":"adcf3e3164ae634ca6bc8c4718e9ad766d62198e","sha256":"eeb08dc8d67ccf633b5aa4a33f1e206308c4e74afb3a396dedba73d7a1124251","sha512":"0a4d9483e467bc57385460c34992a10230306232ee4980dbbf8cf3b37b8a538a11d7f2ab6656c7e763e22e941f651f33312a49456e5993021cb8581d5325e9a6","ssdeep":"1536:u/NdaBxmHhOSs6k7Q40KimqPS42bCjoJ2R4zJy:Dyumj2eV","tlshash":"b853099573bba03643ecc225d0751302b336a4a63896407cb5f92ed6bb4da4661fcb7c","first_seen":"2026-03-26T16:30:19.991877Z","last_seen":"2026-03-26T16:30:19.991877Z","times_seen":1,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":311,"dns":1,"connect":158,"send":0,"wait":148,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/ScrollToTop-8oDbSTbW.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/ScrollToTop-8oDbSTbW.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-1a75\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uk8WrOv3naUM%2FyctwPz7fiZlAy6lfWQvMkA6xiXhfPi32UGH1qsAFQ1BZocb9aNbhoiqtV0PAlVfBHkor6Luj8pql5HUJkBAhXqIrhcsUf8UUHPSoX7shQaW0%2BFEYcz91OmBDwCo\"}]}\r\ncf-ray: 9e27890def8f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6773,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5876)","md5":"a994c4d0d57a101e2087abe71f849414","sha1":"857d4143e05e4c8199661eed23c6665b61f9c495","sha256":"5710cb144b303932368ccb6f2cf6463bf683212b5f02923127fd068b73601116","sha512":"d06ce31f4391f00f3b768a7de2fa2dd2ca2d9b803364cbcfd8a58df489e074e9e017d0d1a98062f2a796d067abaa092eebcc411c707be4218234c456e4d52908","ssdeep":"96:jIZ7RMFjOB0OhJqGqQFqF2GtRyzNfuBPzGoBUmimo8LONSL9qstLAStGKjWeQyHY:C7oS0Yr3FqsGTxGoMSL9lLttjWeQy4","tlshash":"11e1f99ff141ec35e4e706963a4fe68930203b84fa0ec485f17d5cae2921867c30699f","first_seen":"2026-03-15T15:24:57.181896Z","last_seen":"2026-04-14T11:06:52.010913Z","times_seen":10,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/HomeCarouselBanner-BVCUmd_w.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/HomeCarouselBanner-BVCUmd_w.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-85d0\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jCwV5urhk4w0%2Fx4c0jkQqatt4t5eilbQwAJ%2F0WfsRU%2Fsw6X7OOt8isY%2F6n5Rdh%2FLq1J33Eusd1EJvFiwMsByupydMWvHpnzEhxB9dk%2Be%2FrOAR502Hd7tgw391dBX6FM2bwvM%2FHIk\"}]}\r\ncf-ray: 9e278912f8831525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34255)","md5":"3d8354f2b4d7fd8b6e8d31715bd802ad","sha1":"53914208042393dca4cb62d36c08182f9677d436","sha256":"cc16744e57c4d2cc5083536d3293f5eece22a2b508f43ad704e77097bb2d8563","sha512":"8953f76e25977ea802e59cae5ea5ba72e928abc4d2622a84e1b006c7c246320d8141f47f09a613ef412cfbdc56a4990575a570215256cb9a58b3bd5ec627970a","ssdeep":"768:475XylA6wgkfVwNfkoLzqmEt8/d5MXOGVPy8YOvQxIy2nFAGqHSxf8A5ZpkHoQWR:UXiA6wgPnd6vxv81V94Z2a","tlshash":"6bf20ac96124b5b586ef09eb42f98554a2711404f00de6a870fdcdad92bdd880367ffe","first_seen":"2026-03-15T15:24:57.116129Z","last_seen":"2026-04-14T11:06:51.927141Z","times_seen":10,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/icon_150_01-1702017c-fefe-4a1f-8709-b0a46c6e4a44.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/icon_150_01-1702017c-fefe-4a1f-8709-b0a46c6e4a44.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 140690\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 88440e8e36363291ee068addf7075a45\r\nx-amz-request-id: fbefd12c-6076-4941-b89e-e6a59902c159\r\nETag: 82130f0d455d59d5737daa04a51b284e\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Thu, 15 Jan 2026 10:32:14 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":140690,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"82130f0d455d59d5737daa04a51b284e","sha1":"406ecdf93545da82124f36d6533ed39dc4021b63","sha256":"855c6347c373492b22168600fe42d0f038e6efa794e69d093b6f6233693b067c","sha512":"608fd6edd6d7151fc43982a7a906f38cb48f7674022bc665acbf0778b26b06dd7e876974c51cd255e83320e2e696b3cbbae1f4915d67890d23c865e265ddfdce","ssdeep":"3072:oXgvNoljIEOoYqYxnO4gj6TJDUjjKsz2YkdCRNwrPu5dbl:oXgvSEvoYqYpOJjSJQjeszpkdQN9T","tlshash":"16d3121e40ac4f22da267cfe1e4b69b89bb9d8d14d80c5e49439fa423bf8958c152dc7","first_seen":"2026-01-19T14:51:24.465051Z","last_seen":"2026-05-29T09:37:04.394102Z","times_seen":34,"resource_available":false,"data":null}},"time_used":3539,"timings":{"blocked":876,"dns":1,"connect":295,"send":0,"wait":299,"receive":1470,"ssl":595},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-GEY91XQ7RC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beabox.live/","date":"2026-03-26T16:29:36.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-GEY91XQ7RC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beabox.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 16:29:36 GMT\r\nexpires: Thu, 26 Mar 2026 16:29:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 153829\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":462032,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"7a2f81be302c95ec5d509fe1efd813a9","sha1":"48b83e034523cc09897e868b9505c352a591919d","sha256":"c6a17dfed07e63537a5f2b1e9188832facab7552b5e589a0419d34d285cb450e","sha512":"a96087f9f8d95349b7d0d8f16d6647aa7c7685e843e30128f5a7bb6cf51782bc89854d187ee5c33fe5a4289dd253500a202cf05c86d0bae2cd29a11b7b0d17d7","ssdeep":"6144:+VOK1WsG4ohSGZckTv8wRXpQm6CKqA8BK4yP8NHoZb:cmsG40SFkL8UG","tlshash":"3fa4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-03-26T16:30:19.966717Z","last_seen":"2026-03-26T16:30:19.966717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":46,"receive":68,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/api/vod/latest?page=1\u0026limit=8","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET /api/vod/latest?page=1\u0026limit=8 HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nCookie: _ga_GEY91XQ7RC=GS2.1.s1774542577$o1$g0$t1774542577$j60$l0$h0; _ga=GA1.1.254442775.1774542578\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 1260\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 26 Mar 2026 16:08:39 GMT\r\netag: W/\"19c1-C+YfBfQ6ts/hs0adacdoOclMMHg\"\r\nlast-modified: Thu, 26 Mar 2026 16:08:39 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\nx-encrypted: AES-128-CBC:hex\r\nx-powered-by: Express\r\ncontent-length: 3837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6593,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9568f444e3818046ed2a36ecbf08ea7f","sha1":"0be61f05f43ab6cfe1b3469d69c76839c94c3078","sha256":"c83442a679ad32103c9c0c49b336a9a07619769db4c13636bed7d0730b3e75db","sha512":"79a47b21322e732515aab4246fc1f0871fd8aaead2d623ef208994c7e756b140f16e075df5cced16060343c545ada497b9cb2218c5010aae0975da6707025984","ssdeep":"192:KJcs05k472wD17zS148xibHFyYAEcRuMI9:KqU4hde1SAvw9","tlshash":"1fd14cfc690678a5227f5a2b5d56ed9842b36603f8b380d502f2e3c70e32f25de4186c","first_seen":"2026-03-26T16:30:19.96924Z","last_seen":"2026-03-26T16:30:19.96924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsIconGrid-B8-agIMT.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsIconGrid-B8-agIMT.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-88c\"\r\nexpires: Sat, 25 Apr 2026 06:50:48 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yH4w9Vc2xEish4VaIpbRdqJPIls8UQ8wMzOejnAK7%2FD0QrXV49VdXfg3vxwYIopg3QHCVPijSRPQNbfVA%2BTXFhLPVyOSss2IMWFMcXPc3f%2FQfXWFl%2B0Pigh1bNUgFRLsKwA6hSDd\"}]}\r\ncf-ray: 9e27891308851525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2188,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2183)","md5":"752479f83a30e532aa7dceed8bc038a3","sha1":"a81230788570ca055222afd5161c737db1f86ee6","sha256":"f31471686dd9d23c4d60da0dfb9b867693c929cacc4bfc5e8d6639c2197beabd","sha512":"bea9b185ecf636504c43eeb85824fe841f60562435ce7e975752b24f1087136d35838470ed94e61cf4967613dd2f39667c8cb1141db2650a190cecb9696a0ff2","ssdeep":"","tlshash":"b541454ee103eeedbab309e4915da500b8065f5cd72ec8d0f1bc96080760d57f93b299","first_seen":"2026-03-15T15:24:57.094909Z","last_seen":"2026-04-14T11:06:51.928408Z","times_seen":10,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"beijing2.xstore.qihu.com/aiwork-feedback-meida/55icon1-170483a5-134e-478c-b597-4c7ea208e4c3.gif","fqdn":"beijing2.xstore.qihu.com","domain":"qihu.com","tld":"com"},"ip":{"addr":"101.199.255.117","port":443,"asn":4808,"as":"China Unicom Beijing Province Network","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pub-bjyt.s3.addops.soft.360.cn","organization":""},"issuer":{"commonName":"WoTrus DV Server CA  [Run by the Issuer]","organization":"WoTrus CA Limited"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9B:C4:35:07:1A:CA:96:53:2D:44:E6:BE:99:4B:B1:72:57:92:4A:DC","sha256":"9C:29:79:87:FD:E4:75:8E:E6:8F:34:46:31:8F:DB:32:98:69:F6:85:D4:3E:05:3D:52:34:63:2A:A2:5F:C7:8F"}}},"request":{"raw":"GET /aiwork-feedback-meida/55icon1-170483a5-134e-478c-b597-4c7ea208e4c3.gif HTTP/1.1\r\nHost: beijing2.xstore.qihu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Thu, 26 Mar 2026 16:29:41 GMT\r\nContent-Type: image/gif\r\nContent-Length: 25872\r\nConnection: keep-alive\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nx-amz-id-2: 7f4fb51f9dd144f8d6fc29dfc11cdd1c\r\nx-amz-request-id: b35278ae-b89a-49e4-89b2-96f24f8463d7\r\nETag: 079e374d25e345cd525eedec77737d2a\r\nCache-Control: no-cache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Tue, 06 May 2025 08:13:24 GMT\r\nAccept-Ranges: bytes, bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25872,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"079e374d25e345cd525eedec77737d2a","sha1":"92e1f21385b9cb0b775ba97b20da0051f3f95cb9","sha256":"04cf706b14faec5049538d56e807d78b001477fe89714db1e9372e8ae456aee9","sha512":"296841c03734f8759ce0990322ed2e55ab51eab3fb88c148a904b6555926d9b9f7b941c5bd51e8ee81b9a31ce6f0db3dd2009ab05afbc093a965827ae412c516","ssdeep":"768:88u3Me2sfXiZJxmDuboOnMfFweqopsnMfFweqJYRocrfK9Cgr0erfK9Cgx:fuCGyTwu3MdwboyMdwb6RocrhgrDrhgx","tlshash":"5bc2e0b8c026d997e03137be1ec727174daa5459a60cd8b29ddced113a3423ad4767f0","first_seen":"2025-05-21T04:31:42.714454Z","last_seen":"2026-05-29T09:37:04.336919Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2334,"timings":{"blocked":865,"dns":0,"connect":294,"send":0,"wait":295,"receive":291,"ssl":587},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.tmzyz.com/vod/7609f98f-bdcc-4777-8821-de9430db1c56.jpeg","fqdn":"img.tmzyz.com","domain":"tmzyz.com","tld":"com"},"ip":{"addr":"104.21.56.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:40.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmzyz.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 11:34:38 GMT","end":"Wed, 17 Jun 2026 12:33:08 GMT"},"fingerprint":{"sha1":"E4:72:88:DC:EF:78:F5:1C:54:DB:3C:2B:90:8A:A9:F5:BB:81:D6:62","sha256":"80:8E:7B:41:8C:ED:57:84:6F:A8:06:15:AC:C6:9C:D6:51:30:8D:D2:05:40:43:47:71:8D:7E:26:B2:51:EB:C4"}}},"request":{"raw":"GET /vod/7609f98f-bdcc-4777-8821-de9430db1c56.jpeg HTTP/1.1\r\nHost: img.tmzyz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60185\r\nlast-modified: Tue, 17 Feb 2026 14:00:04 GMT\r\netag: \"eb19-64b057d050c84\"\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1388\r\ncache-control: max-age=604800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5CML%2BTlIccncwoVb%2FYK8XksEN2I6oXg1EHOkIaxwqjGD2bPmljrWN1joaU3JQhq%2FDs%2B8ogcHqDgpPD4FBtsEzGxhdV2ZUFHcF9zaLroGG5oJwGp1eYx%2BerUxOiMH6iKy\"}]}\r\ncf-ray: 9e27891c0bd0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60185,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 400x225, components 3","md5":"67f99c014473af3b87e4b5fa3eceec0d","sha1":"a2a291eeecf06f3237b1598a9efdb0b8c2fd697c","sha256":"12737b1dd288756dabd537b0b782809f2e54c55a672058578658079203d12f9d","sha512":"5fc307bb55a0dcbdcb67771e7381798c53517eba7bfa1a5af70e4f40124e523a12cef5afd00aa834f790f24ca04ece99eabb018617677a2714cd29f3dc857844","ssdeep":"1536:DaqvW9ny6gULGuWjpxH1ZhNVLSpw5jFHEm23DmcU:LKyOGTH1ZhNV4wHL2TmcU","tlshash":"99430225cb24e240aea2e0f5791225909586fb987cbb3afdc4e352d0f3c5b6275214fd","first_seen":"2026-03-26T16:30:19.995372Z","last_seen":"2026-03-26T16:30:19.995372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":91,"connect":1,"send":0,"wait":17,"receive":3,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.geetest.com/v4/gt4.js","fqdn":"static.geetest.com","domain":"geetest.com","tld":"com"},"ip":{"addr":"104.17.5.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:37.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geetest.com","organization":"Wuhan Jiyi Network Technology Co., Ltd."},"issuer":{"commonName":"GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Fri, 19 Dec 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CA:8B:31:34:03:03:4F:25:DE:AF:F1:76:9E:25:19:08:18:0C:04:EA","sha256":"F3:25:0F:0B:68:0B:B5:E2:F6:2A:F2:FE:E9:AA:10:6C:61:1C:7D:A6:FA:3F:D9:45:0F:E6:58:6D:71:F9:2E:2E"}}},"request":{"raw":"GET /v4/gt4.js HTTP/1.1\r\nHost: static.geetest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 16:29:37 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9e2789069ce70b3d-OSL\r\ncf-cache-status: HIT\r\nage: 819678\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: \"3E10F4BC47F2FCD630ED843E9061CF44\"\r\nexpires: Fri, 27 Mar 2026 16:29:37 GMT\r\nlast-modified: Mon, 28 Jul 2025 15:58:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-md5: PhD0vEfy/NYw7YQ+kGHPRA==\r\nx-oss-hash-crc64ecma: 8068022385750826956\r\nx-oss-object-type: Normal\r\nx-oss-request-id: 698E040160B01E3736243956\r\nx-oss-server-time: 17\r\nx-oss-storage-class: Standard\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3e10f4bc47f2fcd630ed843e9061cf44","sha1":"35b9e07ec532b978d2f92adcdb3d31a9f706383e","sha256":"d16f159d776bfadf27a75099cd3a16e3de499a39d26e7587d0831322f767cc4d","sha512":"8953dcdc7bf40d7c7d849719a6663c66f21fbee4460f2b7ee73d9ce2ee202a9ca68ccae586fd05b1bfa0768cddbdf4c99ce77819f8d2ec03f77ddf412fae8621","ssdeep":"384:0BDAKWacAauzIuUMYVbFX7YoUBXdwNRGjv:0BEKRa2c0","tlshash":"5b62538e68a6a05349b3b778cb5fa514fe694b7340248141bd5ce3586fb043487abfdc","first_seen":"2024-12-27T01:11:33.480297Z","last_seen":"2026-05-29T17:46:45.33229Z","times_seen":1514,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":148,"dns":90,"connect":1,"send":0,"wait":17,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/BottomLoading-kZCn9SVL.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/BottomLoading-kZCn9SVL.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-5d3\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FceVxiNlgNaIIbHWBN5XU%2Fl1WrKEIId80DBX0CayEPz63D3XIaZqu7KWLzp%2BuWM2H9pyylqhXvZnLTOWYiVYWlTIw3hHUASja7I530l24U6aJSFYoDEKCWq2NkUIa4NdOxNAEOhw\"}]}\r\ncf-ray: 9e27890e0f981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1462)","md5":"4d2f14d6031303c140c6f46c402480ae","sha1":"2b76da991144634fe362a87608d5b1b05550ee5d","sha256":"00dfe14689ad055ff202b2ba067a0a977f8b28811985f1b617b98f05def94988","sha512":"6d65a54d7013ea0b090f69e7fe1bdaf5772b49936ede5d2e76514a5b4e4f1856cd78be7faf69ba3798f964d1fc9ddefef2307616f6274ae2278ebaa99855068b","ssdeep":"","tlshash":"6731e11ba003a6bc64e726665b7d5c01a805cf54da1b8c18a07e981e5459c2e3d732ca","first_seen":"2026-03-15T15:24:57.114904Z","last_seen":"2026-04-14T11:06:52.013005Z","times_seen":10,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/layoutStability-Dq7IThs2.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/layoutStability-Dq7IThs2.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-a4a\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGw%2BhjVy9Hd9lO7z%2B8TAYLZ4W0jGjqiVAw7Hk3dBgf4cIircP3U5ySJBpZNg%2BmW3IRRHpufPWf6k3m4py60yPQZySq6ueAzPg5CdyW93n4po%2BgXCwgIMz5H4W%2Fg9tjPEqyam6Mj6\"}]}\r\ncf-ray: 9e27890e1f9b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2531)","md5":"5353d3e35cf4294f300cd4cfa90591e3","sha1":"ff6b45bb3a5c17714f70f8b1ab113e3b08873f5d","sha256":"bbcb3be5565ef159940a3f953c26550a3fe79e808b5047fddc766731f19953ff","sha512":"494be1d41f1b7a1c3f12758f862078d9490966348608dc8e109d209a0295b9cd7aa764f271397f56b99f9c2c0e123dfca5d8fb70fec5a21d1f04914ce39e426a","ssdeep":"","tlshash":"eb5185817aa5a432866a605689511a0273240f649f15c4e8f67d2e6f003bd8337fb27d","first_seen":"2025-09-11T13:20:21.059115Z","last_seen":"2026-04-14T11:06:51.959728Z","times_seen":76,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/tag-CQx7xICw.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/tag-CQx7xICw.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-64f\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXGHKJV%2BtSEmQqxhkNX%2BZMxE5%2FqqM%2BwPFtoRn9MgpWcH1ntL52uvSWlDYYyUHqwaz8LMR8rFBJ7epm1rYlv9vVW%2B%2FWH0vfcFejp%2BqSn%2BklzuuJaYugDA8H5xfQd2UuPhZERmtqc0\"}]}\r\ncf-ray: 9e27890f5ff41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1615,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1614)","md5":"c136b87fe29abb46d9a7a5f9a0b2ab56","sha1":"b1902eb4ab0b396248e30a14554b7c16d791494b","sha256":"1d3a655bb9b102bce0450a26ad9aab2c8c86d47a79d08dceec1c552ae54d4aff","sha512":"37b4801f489fe6a969c30738b0c37c53c02c9484d112d3eaafbdf59102d336330922b90d53830666fedeae537565a5c2d84c138ed0c927449116beb8c6864e35","ssdeep":"","tlshash":"bc316619f06075bd126b4d6eb0ac7ca5e74ccbd8d7575de2f8de013502f20668b36505","first_seen":"2026-03-15T15:24:57.106408Z","last_seen":"2026-04-14T11:06:51.980642Z","times_seen":10,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/AdsSafetyTicker-Ysncr8u9.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:39.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/AdsSafetyTicker-Ysncr8u9.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vrbrave3f.yxevym.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-4f4\"\r\nexpires: Sat, 25 Apr 2026 13:28:53 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 10846\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuz1wie5LA6anaWYIXmngTkE3QwX27wP9AC3K%2BktDAMwH25pwk0rFk4Tw4aXMFTquPPTeFp%2FzTdJ6q5BCZCeBg3VuiXTufaySDeYgPQmZZ%2B4uRNscZdsTJumut%2BleNOhMEXaGsq%2B\"}]}\r\ncf-ray: 9e27890f5ff51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1268,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1191)","md5":"41db6b618277f5e7b6a91533e3fb7f9a","sha1":"f23771a117e78de826d91b6194b3b0b281e8e705","sha256":"533d35783c93a9fb411e9c237a7db76de87579e41ec0e32d31d3e8c9df643b79","sha512":"9c06db16c8ca2f5e08440d3ee7c3c106ebb7da209dbe0de9534435f4830091164fb137f3233fcbed4bcde8af064f49e9edde7c206673ad82984ddee56f77cce5","ssdeep":"","tlshash":"d421451e51114fac6df705a65d3fd809700eaf44cb5b8966b03dee003f64c6d3706685","first_seen":"2026-03-15T15:24:57.093096Z","last_seen":"2026-04-14T11:06:52.027235Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2a5o1b4i1o5.shop/","fqdn":"2a5o1b4i1o5.shop","domain":"2a5o1b4i1o5.shop","tld":"shop"},"ip":{"addr":"23.224.2.106","port":443,"asn":40065,"as":"CNSERVERS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T16:29:36.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2a5o1b4i1o5.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 25 Jan 2026 23:02:36 GMT","end":"Sat, 25 Apr 2026 23:02:35 GMT"},"fingerprint":{"sha1":"3F:BA:A6:D9:E5:54:B2:07:D4:EC:C6:98:67:4F:BE:A6:65:FA:C4:C1","sha256":"0E:32:E8:6D:C4:C7:4C:14:CB:5F:33:DF:0E:78:CD:85:F0:2E:2A:1A:4A:1E:36:66:24:FB:24:C8:FD:58:0D:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2a5o1b4i1o5.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://beabox.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 1164\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Thu, 26 Mar 2026 16:10:13 GMT\r\netag: W/\"69b3e324-9fc\"\r\nlast-modified: Thu, 26 Mar 2026 16:10:13 GMT\r\nserver: openresty\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-cache: HIT, server, disk\r\ncontent-length: 1225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GeeTest","description":"GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.","website":"https://www.geetest.com","common_platform_enumeration":"","icon":"GeeTest.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2556,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"26dbdd38d47fd1bf83830daad32fc39c","sha1":"2c8f847231e331fe71006744db35797045f16fb7","sha256":"bf64cce3fb1ebc4e76623645e638537cf777846b4624dc53a4d07ba789df0b2d","sha512":"5911e12bd0b9810f2a603d1093708222a66397822ce7161678922742fe51656d74532c6ab0e97c89ca2ed364eb3bed2158acbb87b6330c3560bfc64eed5668c0","ssdeep":"","tlshash":"a2510067be418962a71642d2bef2f409a157f18b05d584dbb4ef20743b80be18e43d6d","first_seen":"2026-03-15T15:24:57.131306Z","last_seen":"2026-04-14T11:06:51.946696Z","times_seen":10,"resource_available":true,"data":null}},"time_used":865,"timings":{"blocked":354,"dns":31,"connect":154,"send":0,"wait":155,"receive":1,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/js/20260313101247/utils-vendor-UUdv1Xw0.js","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"172.67.177.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/js/20260313101247/utils-vendor-UUdv1Xw0.js HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2a5o1b4i1o5.shop/\r\nOrigin: https://2a5o1b4i1o5.shop\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 16:29:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Mar 2026 10:12:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b3e324-2053d\"\r\nexpires: Sat, 25 Apr 2026 06:50:47 GMT\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nage: 34731\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uf0z5naWEL%2FSVsASTbUbs5%2FOOzSovqZbxD4DxWOyOZiO1voeyQbpEsDGX3hUTK%2F0W60poySzU%2Fne35aLXF6bqku1DacRblpW2MDKvwOyRzhCOwonRmMkP5j8mvPtHDVBSD42UBf\"}]}\r\ncf-ray: 9e27890d0f791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14724)","md5":"01d9430173b04fffb1357e26ce126349","sha1":"c33b0e7215b525704cc171e55bda092626e53eb4","sha256":"630c039a5231957c4875ad51958c0a91971c2c8ee28a7dbc101aed56f9b8aad5","sha512":"63eb383df3906b5a18fcabb5be8f7b71a3004d6f67ac62da2758abbe6febe85efca6ac5bb3c3909fd331a51e786c93ce81cd5cbe53cb44abb965d3d4909ed246","ssdeep":"3072:9+EUIJvzVudqU9xN16ZhmTSc2XZKDRVm9WZHpiZEXUVvtrOr7QXL7Y/TJ3Bj2fIa:QMJvEqU9xN1TTSc2pKDR/W8Alo/T1e1","tlshash":"b3d33bc57295b0a243e760e4043f140bf2ba6d25294d8598f658e8df7cbc98a817bf3d","first_seen":"2026-03-13T02:58:07.83102Z","last_seen":"2026-04-14T11:06:51.932964Z","times_seen":11,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vrbrave3f.yxevym.cn/assets/20260313101247/icon-CVKa8XY1.webp","fqdn":"vrbrave3f.yxevym.cn","domain":"yxevym.cn","tld":"cn"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2a5o1b4i1o5.shop/","date":"2026-03-26T16:29:38.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vrbrave3f.yxevym.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 16:01:32 GMT","end":"Thu, 30 Apr 2026 17:01:25 GMT"},"fingerprint":{"sha1":"EC:05:3F:61:EB:65:D8:A4:53:59:C8:B9:C1:C5:65:CA:FB:6D:5D:86","sha256":"9B:7C:AA:CA:B1:69:F1:88:B7:47:21:24:FE:D6:38:D6:FB:AA:47:CC:3A:57:88:E2:BF:CD:CF:54:58:28:4B:6F"}}},"request":{"raw":"GET /assets/20260313101247/icon-CVKa8XY1.webp HTTP/1.1\r\nHost: vrbrave3f.yxevym.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2a5o1b4i1o5.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T16:58:33.431617Z","times_seen":15878056,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}